Rustfs · Rustfs · CVE-2026-45040
**Name of the Vulnerable Software and Affected Versions**
RustFS versions prior to 1.0.0-beta.2
**Description**
RustFS is a distributed object storage system built in Rust that leaks sensitive information in log outputs. When the server is operated with the `RUST LOG` variable set to `debug`, sensitive credentials such as `SessionToken` (JSON Web Token), `SecretAccessKey`, and full JWT claims are printed in plaintext to the server logs.
**Recommendations**
Update to version 1.0.0-beta.2.