Stored XSS Vulnerability in RustFS Console Exposes Admin S3 Credentials

Stored XSS Vulnerability in RustFS Console Exposes Admin S3 Credentials

First seen 28 Feb 2026, 18:10 UTC GbhackersCyberpress 91% similarity 34.1

Article Content

Browse articles
ThreatCluster

A stored cross-site scripting (XSS) vulnerability in the RustFS Console has been identified, allowing attackers to steal admin S3 credentials. This flaw poses a significant risk of full account takeovers for affected users. The issue was reported on February 27, 2026, and has been confirmed by multiple cybersecurity sources.

ThreatCluster AI

Timeline

2026-02-27
Vulnerability reported in RustFS Console
2026-02-28
Cyberpress publishes details on the XSS flaw

Community

Browse all →

Tracked Entities in This Story