MinIO vulnerabilities
CVEs whose affected-version data names the MinIO package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-113466Medium· 5.3PoCMinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key
A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/common-main.go of the component Embedded Console. Such ma…
▾ TwilightEPSS 0.38%via CVEORG
CVE-2026-97731High· 7.1MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders list
MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders list. extractSignedHeaders() in cmd/signature-v4-utils.go iterates only the claimed list and nev…
▾ TwilightMinIO · MinIOEPSS 0.17%via NVD