https://vulnerability.circl.lu/sightings/feed 2026-08-26T09:16:55.880909+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/200619b9-5556-4052-be99-f7a3131e8619/export 2026-08-26T09:16:55.904178+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "200619b9-5556-4052-be99-f7a3131e8619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-26T00:00:09.889966Z"} 2026-08-26T00:00:09.889966+00:00 https://vulnerability.circl.lu/sighting/b03a024d-5b23-4b77-aefa-47003ec550a4/export 2026-08-26T09:16:55.906615+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b03a024d-5b23-4b77-aefa-47003ec550a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-25T00:00:10.301364Z"} 2026-08-25T00:00:10.301364+00:00 https://vulnerability.circl.lu/sighting/3cd2f569-5ed3-4e13-8a97-60b838e19550/export 2026-08-26T09:16:55.906706+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3cd2f569-5ed3-4e13-8a97-60b838e19550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-54917.yaml", "content": "", "creation_timestamp": "2026-08-24T15:00:10.494869Z"} 2026-08-24T15:00:10.494869+00:00 https://vulnerability.circl.lu/sighting/0bea9a58-110d-4fae-a3d2-180d6b773a5a/export 2026-08-26T09:16:55.906774+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0bea9a58-110d-4fae-a3d2-180d6b773a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5", "content": "# CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54917\n\n## Summary\nCVE-2026-54917 is a critical path traversal and authorization bypass vulnerability affecting the S3 and Iceberg REST catalog gateways in SeaweedFS. By explicitly disabling canonical path cleaning in the gorilla/mux routing system, relative path segments such as '..' are allowed to bypass routing constraints and access control checks. When these paths are collapsed server-side by the backend filer, they resolve to folders outside the authorized bucket boundary, allowing unauthorized cross-bucket access.\n\n## TL;DR\nSeaweedFS gateways disable routing path cleaning, allowing '..' segments to reach the backend. This permits users with access to a single bucket to bypass IAM boundaries and read/write files in any other bucket on the cluster.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SeaweedFS S3 API Gateway\n- SeaweedFS Iceberg REST Catalog Gateway\n- **SeaweedFS**: < 4.30 (Fixed in: `4.30`)\n\n## Mitigation\n\n- Upgrade all SeaweedFS deployments to version 4.30 or later.\n- Disable multi-tenant environments if immediate patching is not possible.\n- Restrict S3 and Iceberg port access using host-based firewalls or network access control lists.\n\n**Remediation Steps:**\n1. Audit existing deployments to locate all S3 API and Iceberg gateway configurations.\n2. Acquire the updated SeaweedFS package or container image (version 4.30 or higher).\n3. Apply the patch and restart the gateway services ('weed s3' or 'weed server').\n4. Verify remediation by attempting signed traversal requests and confirming they return HTTP 400.\n\n## References\n\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54917](https://nvd.nist.gov/vuln/detail/CVE-2026-54917)\n- [https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv](https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv)\n- [https://github.com/seaweedfs/seaweedfs/pull/9687](https://github.com/seaweedfs/seaweedfs/pull/9687)\n- [https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229](https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54917) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-13T00:01:14.322610Z"} 2026-08-13T00:01:14.322610+00:00 https://vulnerability.circl.lu/sighting/06a998e3-9a9d-4a4e-a479-b3c9b0b3b0a7/export 2026-08-26T09:16:55.906862+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "06a998e3-9a9d-4a4e-a479-b3c9b0b3b0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://gist.github.com/alon710/57586b5d8bd6ec2753b002d5acf877e5", "content": "# CVE-2026-54917: CVE-2026-54917: Cross-Bucket Path Traversal and Authorization Bypass in SeaweedFS S3 and Iceberg Gateways\n\n> **CVSS Score:** 10.0\n> **Published:** 2026-08-12\n> **Full Report:** https://cvereports.com/reports/CVE-2026-54917\n\n## Summary\nCVE-2026-54917 is a critical path traversal and authorization bypass vulnerability affecting the S3 and Iceberg REST catalog gateways in SeaweedFS. By explicitly disabling canonical path cleaning in the gorilla/mux routing system, relative path segments such as '..' are allowed to bypass routing constraints and access control checks. When these paths are collapsed server-side by the backend filer, they resolve to folders outside the authorized bucket boundary, allowing unauthorized cross-bucket access.\n\n## TL;DR\nSeaweedFS gateways disable routing path cleaning, allowing '..' segments to reach the backend. This permits users with access to a single bucket to bypass IAM boundaries and read/write files in any other bucket on the cluster.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-22\n- **Attack Vector**: Network\n- **CVSS Score**: 10.0\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SeaweedFS S3 API Gateway\n- SeaweedFS Iceberg REST Catalog Gateway\n- **SeaweedFS**: < 4.30 (Fixed in: `4.30`)\n\n## Mitigation\n\n- Upgrade all SeaweedFS deployments to version 4.30 or later.\n- Disable multi-tenant environments if immediate patching is not possible.\n- Restrict S3 and Iceberg port access using host-based firewalls or network access control lists.\n\n**Remediation Steps:**\n1. Audit existing deployments to locate all S3 API and Iceberg gateway configurations.\n2. Acquire the updated SeaweedFS package or container image (version 4.30 or higher).\n3. Apply the patch and restart the gateway services ('weed s3' or 'weed server').\n4. Verify remediation by attempting signed traversal requests and confirming they return HTTP 400.\n\n## References\n\n- [https://nvd.nist.gov/vuln/detail/CVE-2026-54917](https://nvd.nist.gov/vuln/detail/CVE-2026-54917)\n- [https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv](https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv)\n- [https://github.com/seaweedfs/seaweedfs/pull/9687](https://github.com/seaweedfs/seaweedfs/pull/9687)\n- [https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229](https://github.com/seaweedfs/seaweedfs/commit/dd1b4287899eed3dfd73c2f3b1de001996fda229)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-54917) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-12T22:31:56.548691Z"} 2026-08-12T22:31:56.548691+00:00 https://vulnerability.circl.lu/sighting/1908fec7-1bf8-46ff-9312-0d88b4481a9f/export 2026-08-26T09:16:55.906969+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "1908fec7-1bf8-46ff-9312-0d88b4481a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-w62w-66v9-vvgv", "content": "", "creation_timestamp": "2026-08-12T20:35:10.808575Z"} 2026-08-12T20:35:10.808575+00:00 https://vulnerability.circl.lu/sighting/7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd/export 2026-08-26T09:16:55.907808+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7e1eb2bb-85b8-41c0-adbc-0cbcbec042dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-06T00:00:57.317919Z"} 2026-08-06T00:00:57.317919+00:00 https://vulnerability.circl.lu/sighting/3b66a070-ea1e-4c62-a841-44e45528e01f/export 2026-08-26T09:16:55.907906+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3b66a070-ea1e-4c62-a841-44e45528e01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "published-proof-of-concept", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-06T00:00:08.958596Z"} 2026-08-06T00:00:08.958596+00:00 https://vulnerability.circl.lu/sighting/41258fbd-9338-4c2d-a717-7a4d04027fb9/export 2026-08-26T09:16:55.907977+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "41258fbd-9338-4c2d-a717-7a4d04027fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "Telegram/sjJtFOPrNVJGH8Bcyfvt2TqqQ7q8xvrKLNMkHdu0Vl11BjU", "content": "", "creation_timestamp": "2026-08-05T21:00:04.088747Z"} 2026-08-05T21:00:04.088747+00:00 https://vulnerability.circl.lu/sighting/b83ea308-7768-45d4-bb0a-021a98cafa28/export 2026-08-26T09:16:55.908043+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b83ea308-7768-45d4-bb0a-021a98cafa28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54917", "type": "seen", "source": "https://t.me/GithubRedTeam/96685", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-54917-SeaweedFS-Cross-Bucket-Traversal\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 01:47:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC + analysis for CVE-2026-54917 \u2014 SeaweedFS S3 gateway cross-bucket path traversal (CVSS 10.0, <4.30). Read/write any bucket via .. in the object key.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-05T03:00:05.262233Z"} 2026-08-05T03:00:05.262233+00:00