The Gluster Project — Vulnerabilities & Security Advisories 5

The Gluster Project is an open-source distributed file system designed for scalable network storage, commonly used in cloud environments and data-intensive applications. Historically, it has been vulnerable to remote code execution, privilege escalation, and denial-of-service flaws, often stemming from improper input validation and access control issues. The project has faced notable security concerns, including a critical RCE vulnerability (CVE-2018-14646) that allowed attackers to execute arbitrary code via crafted requests, and several privilege escalation weaknesses in its management interfaces. Despite these issues, Gluster remains relevant for organizations requiring cost-effective, scalable storage solutions, though deployments should implement strict access controls and regular patching to mitigate known risks.