CVE-2026-77611 | SeaweedFS up to 4.39 ACL allowed/protected.txt PutObjectAcl privileges management

August 26, 2026 Yanac

A vulnerability categorized as problematic has been discovered in SeaweedFS up to 4.39. This issue affects the function PutObjectAcl of the file allowed/protected.txt of the component ACL Handler. Such manipulation leads to improper privilege management.

This vulnerability is documented as CVE-2026-77611. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More