Vulnerabilities

TI-2026-74336 CVE-2026-100413

Hard-coded SSH host key in SeaweedFS SFTP Helm chart

MEDIUM 64

SeaweedFS is a distributed storage system for files and blobs.

CVSS 4.0HIGH 7.0 Network No auth User interaction EPSS 0.00368 Published 2026-10-14 Fixed in 4.41 CWE-321

TI-2026-39686 CVE-2026-54917 · GHSA-w62w-66v9-vvgv

HIGH 73

SeaweedFS is a distributed storage system for object storage (S3), file systems, and Iceberg tables.

CVSS 4.0HIGH 7.8 Network No auth No interaction EPSS 0.01641 Published 2026-06-25 Fixed in 4.30, 0.0.0-20260526080459-dd1b4287899e CWE-22

TI-2024-26879 CVE-2024-40120 · GHSA-q97m-8853-pq76

HIGH 70

seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00264 Published 2025-05-16 Fixed in 0.0.0-20240625155419-9ac102336200 CWE-89