Vulnerabilities in MinIO
31 resultsCVE-2024-36107MEDIUMInformation disclosure in minioEPSS 0.5%CVE-2025-32963MEDIUMMinio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STSEPSS 0.5%CVE-2025-62506HIGHMinIO vulnerable to privilege escalation via session policy bypass in service accounts and STSEPSS 0.5%CVE-2025-27414MEDIUMMinIO SFTP authentication bypass due to improperly trusted SSH keyEPSS 0.5%CVE-2026-39414HIGHMinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV ParsingEPSS 0.5%CVE-2025-59952HIGHminio-java Client XML Tag is Vulnerable to Value SubstitutionEPSS 0.5%CVE-2026-40344HIGHMinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer UploadsEPSS 0.4%CVE-2026-33322CRITICALMinIO: JWT Algorithm Confusion in OIDC AuthenticationEPSS 0.4%CVE-2026-33419CRITICALMinIO: LDAP login brute-force via user enumeration and missing rate limitEPSS 0.4%CVE-2026-41145HIGHMinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer UploadsEPSS 0.3%CVE-2026-34204HIGHMinIO is Vulnerable to SSE Metadata Injection via Replication HeadersEPSS 0.1%