Login Request a demo
MI
Vendor
minio
4 products with CVEs on record
33
CVEs
2
On KEV
1
New 30D
Products
MI
minio
minio
9.8
30 CVEs2 on KEV1 new
CO
console
minio
5.3
1 CVEs0 on KEV0 new
MI
minio-java
minio
8.7
1 CVEs0 on KEV0 new
OP
operator
minio
6.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-113466
MI
MinIO
Minio
5.3
0%
Oct 20MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key
CVE-2026-97731
MI
MinIO
MinIO
7.1
0%
Sep 25MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders list
CVE-2026-42600
MI
minio
minio
4.9
9%
May 11MinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
CVE-2026-41145
MI
minio
minio
8.2
0%
Apr 22MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads
CVE-2026-40344
MI
minio
minio
8.2
0%
Apr 22MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads
CVE-2026-39414
MI
minio
minio
6.5
0%
Apr 8MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing
CVE-2026-34204
MI
minio
minio
7.1
0%
Mar 31MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
CVE-2026-33419
MI
minio
minio
7.5
0%
Mar 24MinIO: LDAP login brute-force via user enumeration and missing rate limit
CVE-2026-33322
MI
minio
minio
9.8
0%
Mar 24MinIO: JWT Algorithm Confusion in OIDC Authentication
CVE-2025-62506
MI
minio
minio
8.1
1%
Oct 16MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS
CVE-2025-59952
MI
minio-java
minio
8.7
0%
Sep 29minio-java Client XML Tag is Vulnerable to Value Substitution
CVE-2025-32963
OP
operator
minio
6.9
1%
Apr 22Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS
CVE-2025-31489
MI
minio
minio
8.7
3%
Apr 3MinIO performs incomplete signature validation for unsigned-trailer uploads
CVE-2025-27414
MI
minio
minio
4.6
1%
Feb 28MinIO SFTP authentication bypass due to improperly trusted SSH key
CVE-2024-55949
MI
minio
minio
9.3
1%
Dec 16Privilege escalation in IAM import API in MinIO
CVE-2024-36107
MI
minio
minio
5.3
1%
May 28Information disclosure in minio
CVE-2024-24747
MI
minio
minio
8.8
34%
Jan 31MinIO unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation
CVE-2023-33955
CO
console
minio
5.3
1%
May 30Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited
CVE-2023-28434
In wildKEV
MI
minio
minio
8.8
8%
Mar 22MinIO is vulnerable to privilege escalation on Linux/MacOS
CVE-2023-28433
MI
minio
minio
8.8
1%
Mar 22Minio Privilege Escalation on Windows via Path separator manipulation
CVE-2023-28432
In wildKEV
MI
minio
minio
7.5
84%
Mar 22Minio Information Disclosure in Cluster Deployment
CVE-2023-27589
MI
minio
minio
6.5
1%
Mar 14Minio vulnerable to denial of access by an admin privileged user for root credential
CVE-2023-25812
MI
minio
minio
8.8
1%
Feb 21Allowed DELETE on resources on object locked buckets under Governance mode in Minio
CVE-2022-35919
MI
minio
minio
2.7
52%
Aug 1Authenticated requests for server update admin API allows path traversal in minio
CVE-2022-31028
MI
minio
minio
7.5
3%
Jun 3Possible DDOS by establishing keep-alive connections with anonymous HTTP clients in MinIO
CVE-2022-24842
MI
minio
minio
8.8
2%
Apr 12Improper Privilege Management in MinIO
CVE-2021-43858
MI
Minio
Minio
8.8
35%
Dec 27MinIO is a Kubernetes native application for cloud storage
CVE-2021-41137
MI
Minio
Minio
8.8
1%
Oct 13Minio is a Kubernetes native application for cloud storage
CVE-2021-21390
MI
Minio
Minio
5.9
1%
Mar 19MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service
CVE-2021-21362
MI
Minio
Minio
6.5
1%
Mar 8MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service
CVE-2021-21287
MI
Minio
Minio
7.7
24%
Feb 1MinIO is a High Performance Object Storage released under Apache License v2.0
CVE-2020-11012
MI
Minio
Minio
7.5
2%
Apr 23MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API
CVE-2018-1000538
MI
Minio
Minio
7.5
2%
Jun 26Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE-774) vulnerability in…