CVE-2026-24762

CVE-2026-24762 is a sensitive information disclosure vulnerability affecting RustFS versions alpha.13 through alpha.81, where the distributed object storage system logs sensitive credential material (access key, secret key, session token) in plaintext at an INFO logging level. This allows unauthorized access to credentials by anyone with access to the application logs. With a CVSS score of 7.5 (HIGH), this vulnerability has a low attack complexity and can be exploited remotely without authentication, leading to a high impact on confidentiality. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.