{"id":"CVE-2025-68705","title":"RustFS is a distributed object storage system built in Rust","summary":"RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in versio…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-22"],"vendor":"rustfs","product":"rustfs","affected":["rustfs = 1.0.0"],"published":"2026-01-07","updated":"2026-10-14","sourceUpdated":"2026-10-14T19:10:00.297","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-68705","references":[{"url":"https://github.com/rustfs/rustfs/commit/ab752458ce431c6397175d167beee2ea00507d3e","label":"security-advisories@github.com"},{"url":"https://github.com/rustfs/rustfs/security/advisories/GHSA-pq29-69jg-9mxc","label":"security-advisories@github.com"}],"tags":["nvd","exploit-available"],"epss":0.07261,"epssPercentile":0.94259,"exploits":{"github":1,"githubRepos":["https://github.com/imjdl/CVE-2025-68705"],"checkedAt":"2026-10-14T19:50:33.269Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T19:49:57.558Z","slug":"CVE-2025-68705","body":"## Overview\n\nRustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in the /rustfs/rpc/read_file_stream endpoint. This issue has been patched in version 1.0.0-alpha.79.\n\n## Affected\n\n- `rustfs = 1.0.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":67,"depthScoreParts":{"impact":53.9,"likelihood":1.5,"exploitation":12,"ransomware":0},"changes":[]}