MI
Product
minio
On CISA KEVExploited in the wild
30
CVEs
2
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 19Medium 8Low 1
Watch
Add minio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39414 | 6.5 | Apr 8 | MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing Affected: >= RELEASE.2018-08-18T03-49-57Z, < RELEASE.2025-12-20T04-58-37Z |
| CVE-2023-27589 | 6.5 | Mar 14 | Minio vulnerable to denial of access by an admin privileged user for root credential Affected: >= RELEASE.2020-12-23T02-24-12Z, < RELEASE.2023-03-13T19-46-17Z |
| CVE-2021-21362 | 6.5 | Mar 8 | MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service Affected: before 2021-03-04t00-53-13z |
| CVE-2021-21390 | 5.9 | Mar 19 | MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service Affected: before 2021-03-17t02-33-02z |
| CVE-2026-113466 | 5.3 | Oct 20 | MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key Affected: RELEASE.2025-10-15T17-29-55Z |
| CVE-2024-36107 | 5.3 | May 28 | Information disclosure in minio Affected: < RELEASE.2024-05-27T19-17-46Z |
| CVE-2026-42600 | 4.9 | May 11 | MinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint Affected: >= RELEASE.2022-07-24T01-54-52Z, < RELEASE.2026-04-14T21-32-45Z |
| CVE-2025-27414 | 4.6 | Feb 28 | MinIO SFTP authentication bypass due to improperly trusted SSH key Affected: >= RELEASE.2024-06-06T09-36-42Z, < RELEASE.2025-02-28T09-55-16Z |
Showing 8