FIND-20260404-022 · 2026-04-04 · Innovation Veille
RustFS — S3-Compatible High-Performance Object Storage (2.3x Faster Than MinIO)
trending-repo
HIGH
RustFS is an open-source Apache 2.0 S3-compatible object storage system written in Rust, claiming 2.3x faster than MinIO for 4KB object payloads. 24k+ stars, very active development (commit Apr 4 2026). WARNING: Multiple known CVEs including CVE-2026-27822 (Stored XSS CVSS 10.0, leaks S3 credentials from console), CVE-2026-27607 (presigned POST policy bypass, HIGH), and CVE-2025-68926 (hardcoded gRPC auth token, Critical). All patched in 1.0.0-alpha.83+. Still in alpha.
Source
https://github.com/rustfs/rustfs
ODS Impact
DocStore service stores documents and PDFs. RustFS could replace MinIO for ODS object storage layer with better Rust-native performance. However, alpha stability and multiple recent CVEs make it unsuitable for production now. Monitor for stable 1.x release.
Security Review
License: Apache-2.0 | Maintenance: ACTIVE | Risk: MEDIUM | Recommendation: USE_WITH_CAUTION
Tags
rust
s3
object-storage
minio
docstore
performance