minio Latest Vulnerabilities
Latest vulnerabilities published by minio
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Privilege Escalation Vulnerability in MinIO Object Storage System
CVE-2025-62506MinioMinio👾🟡8.1HIGHInformation Disclosure in MinIO Java SDK by MinIO
CVE-2025-59952MinioMinio-java8.7HIGHIAM Authentication Vulnerability in MinIO Operator for Kubernetes
CVE-2025-32963MinioOperator6.9MEDIUMAuthorization Flaw in MinIO Object Storage by MinIO
CVE-2025-31489MinioMinio8.7HIGHSSH Key Authentication Bypass Vulnerability in MinIO Object Storage
CVE-2025-27414MinioMinio4.6MEDIUMPrivilege Escalation Vulnerability in MinIO Object Storage Solution
CVE-2024-55949MinIOAnonymous Requests Can Bypass Metadata Validation in MinIO
CVE-2024-36107MinioMinio5.3MEDIUMInherited Permissions Vulnerability in MinIO Could Allow Overriding of Access Controls
CVE-2024-24747MinioMinioEPSS 17%8.8HIGHMinio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited
CVE-2023-33955minioconsole5.3MEDIUMMinio Information Disclosure in Cluster Deployment
CVE-2023-28432MinioMinio👾🟡EPSS 94%🦅7.5HIGHMinio Privilege Escalation on Windows via Path separator manipulation
CVE-2023-28433MinioMinio8.8HIGHMinIO is vulnerable to privilege escalation on Linux/MacOS
CVE-2023-28434MinioMinio👾🟡EPSS 46%🦅📰8.8HIGHMinio vulnerable to denial of access by an admin privileged user for root credential
CVE-2023-27589MinioMinio6.5MEDIUMAllowed DELETE on resources on object locked buckets under Governance mode in Minio
CVE-2023-25812MinioMinio6.5MEDIUMAuthenticated requests for server update admin API allows path traversal in minio
CVE-2022-35919MinioMinio👾🟡7.4HIGHPossible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIO
CVE-2022-31028MinioMinio7.5HIGHImproper Privilege Management in MinIO
CVE-2022-24842MinioMinio8.8HIGHUser privilege escalation in MinIO
CVE-2021-43858MinioMinio👾🟡EPSS 53%8.8HIGHAuthentication bypass issue in the Operator Console
CVE-2021-41266MinioConsoleEPSS 79%8.6HIGHBypassing policy restrictions on regular users
CVE-2021-41137MinioMinio8.8HIGHMITM modification of request bodies in MinIO
CVE-2021-21390MinioMinio6.5MEDIUMBypassing readOnly policy by creating a temporary 'mc share upload' URL
CVE-2021-21362MinioMinio7.7HIGHServer-Side Request Forgery in MinIO Browser API
CVE-2021-21287MinioMinioEPSS 91%7.7HIGHAuthentication bypass MinIO Admin API
CVE-2020-11012MinioMinio9.3CRITICALMemory Allocation Vulnerability in Minio S3 Server by Minio Inc.
CVE-2018-1000538MinioMinio7.5HIGH