What’s Vulnerable › Products

rucio vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your rucio version is affected

Latest rucio vulnerabilities

• CVE-2026-29090 — Rucio SQL injection in postgres_meta DID search path compromises PostgreSQL metadata database (CVSS 8.8)
• CVE-2026-29080 — Rucio SQL Injection in FilterEngine Oracle JSON Path via DID Search API (CVSS 8.8)
• CVE-2026-25736 — Rucio WebUI has a Stored Cross-site Scripting (XSS) Vulnerability in its Custom RSE Attribute (CVSS 4.8)
• CVE-2026-25735 — Rucio WebUI has a Stored Cross-site Scripting (XSS) vulnerability its Identity Name (CVSS 4.8)
• CVE-2026-25734 — Rucio WebUI has Stored Cross-site Scripting (XSS) in RSE Metadata (CVSS 4.8)
• CVE-2026-25733 — Rucio WebUI Vulnerable to Stored Cross-site Scripting (XSS) through Custom Rule Function (CVSS 5.4)
• CVE-2026-25138 — Rucio WebUI has Username Enumeration via Login Error Message (CVSS 5.3)
• CVE-2026-25136 — Rucio WebUI has a Reflected Cross-site Scripting Vulnerability (CVSS 6.1)