{"action":"Upgrade rustfs to 1.0.0-alpha.78 or later.","affected":[{"fixed":"1.0.0-alpha.78","introduced":"1.0.0-alpha.13"}],"component":"rustfs","cve_ids":["CVE-2025-68926"],"ecosystem":"crates.io","epss":0.3185,"exploited":false,"fixed_versions":["1.0.0-alpha.78"],"ghsa_id":"GHSA-h956-rh7x-ppgj","id":"tcs_01M5KF0E622GFVCC9CZZ5GPEXA","modified_at":"2026-02-03T03:16:25.981438Z","published_at":"2025-12-30T23:06:15Z","references":["https://osv.dev/vulnerability/GHSA-h956-rh7x-ppgj","https://github.com/rustfs/rustfs/security/advisories/GHSA-h956-rh7x-ppgj","https://nvd.nist.gov/vuln/detail/CVE-2025-68926","https://github.com/rustfs/rustfs","https://github.com/rustfs/rustfs/releases/tag/1.0.0-alpha.78"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-h956-rh7x-ppgj","url":"https://osv.dev/vulnerability/GHSA-h956-rh7x-ppgj"}],"summary":"RustFS has a gRPC Hardcoded Token Authentication Bypass"}