treeverse lakeFS vulnerabilities
7 published CVEs name treeverse lakeFS among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-48026
lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML
treeverse · lakeFS
High8.7 - CVE-2026-66006
lakeFS Unauthenticated Operator Metadata Overwrite via setup_comm_prefs
treeverse · lakeFS
Medium6.9 - CVE-2026-26187
lakeFS vulnerable to path traversal in local block adapter allow cross-namespace and sibling directory access
treeverse · lakeFS
High8.1 - CVE-2025-68671
lakeFS is Missing Timestamp Validation in S3 Gateway Authentication
treeverse · lakeFS
Medium6.5 - CVE-2025-64179
lakeFS: Unauthenticated access to API usage metrics
treeverse · lakeFS
Medium5.3 - CVE-2025-27100
An authenticated user can crash lakeFS by exhausting server memory
treeverse · lakeFS
Medium6.5 - CVE-2024-43784
Re-creating a deleted user in lakeFS will re-enable previous user credentials that existed prior to it's deletion
treeverse · lakeFS
Medium5.7