CVE-2026-73289 | RustFS up to 1.0.0-beta.11 Condition string.rs eval_like privileges management

A vulnerability classified as critical was found in RustFS up to 1.0.0-beta.11. This impacts the function eval_like of the file crates/policy/src/policy/function/string.rs of the component Condition. The manipulation results in improper privilege management.

This vulnerability is identified as CVE-2026-73289. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.