Vulnerability GO-2025-4034
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
11 months ago
October 30, 2025 at 03:02 PM UTC
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio
<0.0.0-20251015170045-c1a49490c78e
<0.0.0-20251015170045-c1a49490c78e
Summary
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio
Details
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint in github.com/minio/minio
>=0.0.0 GO-2026-5757
>=0.0.0 GO-2026-5757
Unknown
3 months ago
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
Medium Risk
5 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
Impacted packages
Timeline
Published
11 months ago
October 30, 2025 at 03:02 PM UTC
Last Modified
2 hours ago
October 08, 2026 at 08:11 AM UTC