CVE-2026-129355: sigoden dufs WebDAV COPY Operation server.rs authorization
Published Nov 15, 2026
·Updated
A vulnerability has been found in sigoden dufs up to 0.46.0. This affects an unknown part of the file src/server.rs of the component WebDAV COPY Operation Handler. The manipulation leads to incorrect authorization. The attack is possible to be carried out remotely. Upgrading to version 0.47.0 is able to mitigate this issue. The identifier of the patch is fba13dffb9c65b5e5e26419f64de709200277a04. It is advisable to upgrade the affected component.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
sigoden/dufsto a version that resolves this vulnerability.Fixed in 0.47.0Patch fba13dffb9c65b5e5e26419f64de709200277a04
Event History
Nov 15, 2026
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·01:18 AM
DescriptionSeverityWeakness