Description
MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Chainguard | MinIO | ≤ RELEASE.2026-09-21T00-15-41Z | — |