Skip to content
OpenAdvisories
High ICSMA-25-294-01 3 CVEs

Oxford Nanopore Technologies MinKNOW

Published Oct 21, 2025 · Updated Oct 21, 2025

Vendor: Oxford Nanopore Technologies Product: MinKNOW

Summary

Successful exploitation of these vulnerabilities could allow an attacker to disrupt sequencing operations and processes, exfiltrate and manipulate data, and bypass authentication controls.

Vulnerabilities 3

  • High 8.6
    CVE-2024-35585

    Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.

    Oxford Nanopore Technologies MinKNOW
  • High 7.8
    CVE-2025-54808

    Oxford Nanopore Technologies MinKNOW Insufficiently Protected Credentials

    Oxford Nanopore Technologies' MinKNOW software at or prior to version 24.11 stores authentication tokens in a file located in the system's temporary directory (/tmp) on the host machine. This directory is typically world-readable, allowing any local user or a…

    Oxford Nanopore Technologies MinKNOW
  • Medium 5.5
    CVE-2025-10937

    Oxford Nanopore Technologies MinKNOW Improper Check for Unusual or Exceptional Conditions

    Oxford Nanopore Technologies' MinKNOW software at or prior to version 24.11 creates a temporary file to store the local authentication token during startup, before copying it to its final location. This temporary file is created in a directory accessible to a…

    Oxford Nano Technologies MinKNOW

Revision history

  1. #1

    Initial Publication

References