diff --git a/Cargo.lock b/Cargo.lock
index d3f53f07e..498688f76 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -10589,7 +10589,7 @@ checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
 [[package]]
 name = "s3s"
 version = "0.14.1"
-source = "git+https://github.com/cxymds/s3s.git?rev=fe3941d91fa1c69956f209a9145995c9f0235bff#fe3941d91fa1c69956f209a9145995c9f0235bff"
+source = "git+https://github.com/rustfs/s3s.git?rev=d7028511a53f69d41ed3c69f36899f9b1aede647#d7028511a53f69d41ed3c69f36899f9b1aede647"
 dependencies = [
  "arc-swap",
  "arrayvec",
diff --git a/Cargo.toml b/Cargo.toml
index 944db98b4..feae86db2 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -289,7 +289,7 @@ rustify = { version = "0.7", default-features = false }
 rustix = { version = "1.1.4" }
 rust-embed = { version = "8.12.0" }
 rustc-hash = { version = "2.1.3" }
-s3s = { git = "https://github.com/cxymds/s3s.git", rev = "fe3941d91fa1c69956f209a9145995c9f0235bff" }
+s3s = { git = "https://github.com/rustfs/s3s.git", rev = "d7028511a53f69d41ed3c69f36899f9b1aede647" }
 serial_test = "4.0.1"
 shadow-rs = { default-features = false, version = "2.0.0" }
 siphasher = "1.0.3"
diff --git a/deny.toml b/deny.toml
index 23c592ee5..c52861e1d 100644
--- a/deny.toml
+++ b/deny.toml
@@ -40,9 +40,9 @@ allow-git = [
     # SigV4 payload-checksum fix until it is available in a crates.io release.
     # owner: marshawcoco  review: 2026-10
     "https://github.com/s3s-project/s3s.git",
-    # Presigned expiry and constant-time authentication fixes pending upstream merge.
-    # owner: cxymds  review: 2026-10
-    "https://github.com/cxymds/s3s.git",
+    # RustFS fork carrying presigned expiry and constant-time authentication fixes.
+    # owner: rustfs-maintainers  review: 2026-10
+    "https://github.com/rustfs/s3s.git",
     # MiMalloc fork pinned for hotpath allocation counting support.
     # owner: houseme  review: 2026-10
     "https://github.com/xonatius/mimalloc_rust.git",