Cyberpress
Stored XSS Vulnerability in RustFS Console Exposes Admin S3 Credentials
First seen 28 Feb 2026, 18:10 UTC
•
•91% similarity
•34.1
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
A stored cross-site scripting (XSS) vulnerability in the RustFS Console has been identified, allowing attackers to steal admin S3 credentials. This flaw poses a significant risk of full account takeovers for affected users. The issue was reported on February 27, 2026, and has been confirmed by multiple cybersecurity sources.
ThreatCluster AI
Timeline
2026-02-27
Vulnerability reported in RustFS Console
2026-02-28
Cyberpress publishes details on the XSS flaw