CVE-2026-58273 | Rucio REST API Endpoint credentials.py SignURL.get X-Rucio-Account authorization

October 28, 2026 Yanac

A vulnerability, which was classified as critical, was found in Rucio. This impacts the function SignURL.get of the file lib/rucio/web/rest/flaskapi/v1/credentials.py of the component REST API Endpoint. Executing a manipulation of the argument X-Rucio-Account can lead to authorization bypass.

This vulnerability is handled as CVE-2026-58273. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More