CVE-2026-33419 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-JV87-32HW-HH99 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-3RH2-V3GR-35P9 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-JV87-32HW-HH99 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-34204 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-3RH2-V3GR-35P9 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-33419 vulnerabilities

Vulnerabilities for packages: minio...

PT-2026-37272

Name of the Vulnerable Software and Affected Versions MinIO versions RELEASE.2022-07-24T01-54-52Z through RELEASE.2025-09-07T16-13-09Z Description A path traversal issue in the ReadMultiple internode storage-REST endpoint allows an attacker with the cluster root JWT to read files outside the...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: bento, cert-manager, gitea, openbao, external-secrets-operator, flux-source-controller, percona-server-mongodb-operator, rclone, rancher-agent, kyverno-notation-aws, opentofu, kyverno, nuclei, rancher, rancher-webhook, teleport, gitlab-runner, trufflehog,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: bento, cert-manager, gitea, openbao, external-secrets-operator, flux-source-controller, percona-server-mongodb-operator, rclone, rancher-agent, kyverno-notation-aws, opentofu, kyverno, nuclei, rancher, rancher-webhook, teleport, gitlab-runner, trufflehog,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: cert-manager, dex-fips, cert-manager-istio-csr-fips, versitygw, commercial-grafana, grafana, kyverno-fips, ratify, neuvector-fips, k6-fips, flux, external-secrets-fips, flux-source-controller-fips, vault, cert-manager-openshift-routes-fips, commercial-kyverno,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: cert-manager, dex-fips, cert-manager-istio-csr-fips, versitygw, commercial-grafana, grafana, kyverno-fips, ratify, neuvector-fips, k6-fips, flux, external-secrets-fips, flux-source-controller-fips, vault, cert-manager-openshift-routes-fips, commercial-kyverno,...

BIT-MINIO-2026-41145 MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads

MinIO is a high-performance object storage system. Starting in 2023.05.18 and prior to 2026.04.11, an authentication bypass vulnerability in MinIO's STREAMING-UNSIGNED-PAYLOAD-TRAILER code path allows any user who knows a valid access key to write arbitrary objects to any bucket without knowing t...

BIT-MINIO-2026-40344 MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads

MinIO is a high-performance object storage system. Starting in 2023.05.18 and prior to 2026.04.11, an authentication bypass vulnerability in MinIO's Snowball auto-extract handler PutObjectExtractHandler allows any user who knows a valid access key to write arbitrary objects to any bucket without...

CVE-2026-41145

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's STREAMING-UNSIGNED-PAYLOAD-TRAILER code path allows any user who knows a valid access key to write arbitrary...

CVE-2026-40344

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's Snowball auto-extract handler PutObjectExtractHandler allows any user who knows a valid access key to write...

EUVD-2026-24581

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's STREAMING-UNSIGNED-PAYLOAD-TRAILER code path allows any user who knows a valid access key to write arbitrary...

CVE-2026-41145

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's STREAMING-UNSIGNED-PAYLOAD-TRAILER code path allows any user who knows a valid access key to write arbitrary...

CVE-2026-41145

MinIO contains an authentication bypass in the STREAMING-UNSIGNED-PAYLOAD-TRAILER code path, affecting releases prior to RELEASE.2026-04-11T03-20-12Z. An attacker with a valid access key (including default minioadmin or any key with WRITE on a bucket) can write objects to any bucket without a val...

CVE-2026-41145 MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's STREAMING-UNSIGNED-PAYLOAD-TRAILER code path allows any user who knows a valid access key to write arbitrary...