rucio vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 20269

Newest CVEs

• CVE-2026-58273

  Rucio: Authorisation Bypass on REST API endpoint for signing URLs

  rucio · rucio

  High8.1
• CVE-2026-29090

  Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database

  rucio · rucio

  Critical9.0
• CVE-2026-29080

  Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API

  rucio · rucio

  Critical9.4
• CVE-2026-25736

  Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute

  rucio · rucio

  Medium6.1
• CVE-2026-25735

  Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name

  rucio · rucio

  Medium6.1
• CVE-2026-25734

  Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata

  rucio · rucio

  Medium6.1
• CVE-2026-25733

  Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function

  rucio · rucio

  High7.3
• CVE-2026-25138

  Rucio WebUI has Username Enumeration via Login Error Message

  rucio · rucio

  Medium5.3
• CVE-2026-25136

  Rucio WebUI has a Reflected Cross-site Scripting Vulnerability

  rucio · rucio

  High8.1
• CVE-2025-54064

  rucio-server, rucio-ui, and rucio-webui vulnerable to insertion of X-Rucio-Auth-Token in apache access logfiles

  rucio · helm-charts

  Medium6.9