Search: CVE-2026-55874

SeaweedFS S3 gateway versions prior to 4.34 contain a path traversal vulnerability in the X-Amz-Copy-Source header used by CopyObject and UploadPartCopy operations. This flaw allows an attacker authorized on one bucket to read objects from other buckets by exploiting improper validation of path segments in the copy source header. The vulnerability breaks bucket isolation, enabling cross-bucket object reads. The issue was fixed in version 4.34 by validating the copy-source bucket and object key to reject traversal segments.