CVE-2026-100413

SeaweedFS is a distributed storage system for files and blobs.

Seaweedfs

SeaweedFS is a distributed storage system for files and blobs. From 4.0.388 until 4.41, the SFTP Helm chart embedded one unencrypted Ed25519 private host key in k8s/charts/seaweedfs/templates/sftp/sftp-secret.yaml as stringData.seaweedfs_sftp_ssh_private_key. A standalone deployment presented that public key when sftp.enabled and sftp.enableAuth were true, sftp.existingConfigSecret was not supplied, the legacy sftp.sshPrivateKey path remained selected, a valid config-ssh…

14. Okt 2026

Ausgewertete Quellen

• NVD
  CVE-2026-100413
• GitHub
  https://github.com/seaweedfs/seaweedfs/security/advisories/GHSA-hqp5-j79g-vr89