Vendors / seaweedfs Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 9
Exploited now seaweedfs records in CISA KEV No seaweedfs vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables.
CVSS 4.0 HIGH 7.8· Network · No auth · No interaction · EPSS 0.01641 · Published 2026-06-25 · Fixed in 4.30, 0.0.0-20260526080459-dd1b4287899e CWE-22
Priority HIGH 70
SeaweedFS is a distributed storage system for files and blobs.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00363 · Published 2026-08-26 · Fixed in 4.40 CWE-863
Priority HIGH 70
seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00264 · Published 2025-05-16 · Fixed in 0.0.0-20240625155419-9ac102336200 CWE-89
Priority HIGH 67
SeaweedFS before 4.34 contains a path traversal vulnerability in the S3 gateway DeleteMultipleObjectsHandler that allows authenticated S3 principals with write access to a single bucket to delete arbitrary objects in oth…
CVSS 4.0 HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00871 · Published 2026-06-30 · Fixed in 4.34 CWE-22
Priority MEDIUM 64
SeaweedFS is a distributed storage system for files and blobs.
CVSS 4.0 HIGH 7.0· Network · No auth · User interaction · EPSS 0.00368 · Published 2026-10-14 · Fixed in 4.41 CWE-321
Priority MEDIUM 64
SeaweedFS is a distributed storage system for files and blobs.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00384 · Published 2026-08-26 · Fixed in 4.40 CWE-863
Priority MEDIUM 50
SeaweedFS is a distributed storage system.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00779 · Published 2026-08-11 · Fixed in 4.24, 0.0.0-20260512171108-5e8f99f40a8a CWE-306
Priority MEDIUM 47
SeaweedFS is a distributed storage system.
CVSS 3.1 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00527 · Published 2026-08-11 · Fixed in 4.24, 0.0.0-20260512171120-69da20bdaec9 CWE-918
Priority MEDIUM 45
SeaweedFS before 4.30 reflects the callback query parameter verbatim into responses served with Content-Type application/javascript in the shared writeJson helper (weed/server/common.go), with no callback-name validation…
CVSS 4.0 LOW 2.3· Network · No auth · User interaction · EPSS 0.00333 · Published 2026-06-30 · Partial fix · 4.30 CWE-79
Priority MEDIUM 40
SeaweedFS is a distributed storage system for files and blobs.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00396 · Published 2026-08-26 · Fixed in 4.40 CWE-863
Priority LOW 38
SeaweedFS is a distributed storage system.
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00426 · Published 2026-08-11 · Fixed in 4.24, 0.0.0-20260512171048-05ed5c9ae8a2 CWE-863
Priority LOW 35
SeaweedFS is a distributed storage system.
CVSS 3.1 HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00606 · Published 2026-07-08 · Fixed in 4.34, 0.0.0-20260612000715-b44cf51fe931 CWE-22
Priority LOW 33
SeaweedFS is a distributed storage system for files and blobs.
CVSS 3.1 HIGH 7.6· Network · Low privileges · No interaction · EPSS 0.00384 · Published 2026-08-26 · Fixed in 4.40 CWE-639
Priority LOW 20
SeaweedFS is a distributed storage system.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00342 · Published 2026-07-08 · Fixed in 4.34, 0.0.0-20260614205536-b13463880c1f CWE-863
Open these records in search → All records by CVSS severity
2 9 2 1 0
THREATIST.IORead the docs