Skip to content
OpenAdvisories

Package · Go

github.com/minio/minio

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-42600

    MinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint

    MinIO is a high-performance object storage system. From RELEASE.2022-07-24T01-54-52Z to before RELEASE.2026-04-14T21-32-45Z, A path traversal vulnerability in MinIO's ReadMultiple internode storage-REST endpoint allows a caller holding the cluster root JWT to…

    minio minio github.com/minio/minio Go
  • Medium 4.6
    CVE-2025-27414

    MinIO SFTP authentication bypass due to improperly trusted SSH key

    MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data…

    minio minio github.com/minio/minio Go
  • Medium 5.3
    CVE-2024-36107

    Information disclosure in minio

    MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. `If-Modified-Since` and `If-Unmodified-Since` headers when used with anonymous requests by sending a random object name requests can be used to determine if an o…

    minio minio github.com/minio/minio Go