MinIO faces a critical 8.8 CVSS vulnerability allowing unauthenticated object writes by bypassing signature checks. Secure your AI/ML data—upgrade now!
MinIO
MinIO patched a privilege escalation flaw (CVE-2025-62506) where restricted service accounts could bypass session policies during account creation to gain full parent privileges.
Learn about the critical MinIO vulnerability tracked as CVE-2025-31489 and why users must upgrade immediately.
Learn about the critical vulnerability (CVE-2024-55949) in MinIO object storage platform that allows privilege escalation and poses a significant risk to data security.
The vulnerability tracked as CVE-2023-28434 has a CVSS score of 8.8 and allows an attacker to bypass metadata bucket name checking
Due to CVE-2023-28432, MinIO returns all environment variables, including sensitive information like MINIO_SECRET_KEY and MINIO_ROOT_PASSWORD