CVE-2026-72921 | SeaweedFS up to 4.23 Authorization Check filer_server_handlers.go strings.HasPrefix improper authorization

August 11, 2026 Yanac

A vulnerability classified as very critical has been found in SeaweedFS up to 4.23. This vulnerability affects the function strings.HasPrefix of the file weed/server/filer_server_handlers.go of the component Authorization Check. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-72921. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More