Stored XSS Flaw in RustFS Console Leaks Admin S3 Credentials

Back Cyberpress

Stored XSS Flaw in RustFS Console Leaks Admin S3 Credentials

Cyberpress • February 28, 2026

Share: View original

A severe stored cross-site scripting ( XSS ) flaw in the RustFS Console lets attackers steal admin S3 credentials, enabling full account takeovers.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Stored XSS Vulnerability in RustFS Console Exposes Admin S3 Credentials A stored cross-site scripting (XSS) vulnerability in the RustFS Console has been identified, allowing attackers to steal admin S3 credentials. This flaw poses a significant risk of full account takeovers for affected users. The issue was reported on February 27, 2026, and has been confirmed by multiple cybersecurity sources. 2 sources 34

Extracted Entities

Platforms (1)

Vulnerabilities (2)