CVE-2024-40120: Seaweedfs

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

seaweedfs v3.68 was discovered to contain a SQL injection vulnerability via the component /abstract_sql/abstract_sql_store.go.

Affected products

• Seaweedfs Seaweedfs: version 3.68 only

Published 2025-05-16. Last modified 2026-06-17.