839 matches found
PT-2026-03: Access Control Violation Vulnerability in PT NGFW
The vulnerability was identified in PT NGFW, version1.8.1 certified. The discovered vulnerability can be exploited by an attacker to gain access to MinIO backups. The exfiltrated data can be used for reconnaissance of the organization's infrastructure to conduct subsequent attacks on the system...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in MinIO [CVE-2025-59952]
Summary IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in MinIO, due to an unintended behavior with XML tag values CVE-2025-59952. MinIO is used in our java microservices. This vulnerabilitiy has been addressed. Please read the details for remediation below...
Privilege Escalation
github.com/minio/minio is vulnerable to privilege escalation. The vulnerability is due to improper IAM session-policy validation, where restricted service or STS accounts can bypass inline policy checks when creating new service accounts, which allows an attacker to escalate privileges and gain...
GHSA-7C64-F9JR-V9H2 vulnerabilities
Vulnerabilities for packages: aws-nuke, kots, ko-fips, jitsucom-bulker, gops, localstack, prometheus-node-exporter-fips, crane-fips, ipfs-cluster, crossplane-function-auto-ready-fips, kiali, k8sgateway, ip-masq-agent, cloud-provider-vsphere, nova, nats-server, k8sgateway-fips, nri-cassandra,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: aws-nuke, kots, ko-fips, jitsucom-bulker, gops, localstack, prometheus-node-exporter-fips, crane-fips, ipfs-cluster, crossplane-function-auto-ready-fips, kiali, k8sgateway, ip-masq-agent, cloud-provider-vsphere, nova, nats-server, k8sgateway-fips, nri-cassandra,...
CVE-2025-61729 vulnerabilities
Vulnerabilities for packages: openbao-k8s, glow, pguser, snyk-cli, kargo, jitsucom-bulker, scorecard, haproxy-ingress, rabbitmq-messaging-topology-operator, spire-server, hubble, temporal-server, kube-bench, sriov-network-device-plugin, db-operator, spire-controller-manager, gitlab-pages,...
GHSA-32FW-GQ77-F2F2 vulnerabilities
Vulnerabilities for packages: bento, minio, falcosidekick...
CVE-2025-10543 vulnerabilities
Vulnerabilities for packages: bento, minio, falcosidekick...
GHSA-32FW-GQ77-F2F2 vulnerabilities
Vulnerabilities for packages: falcosidekick-fips, telegraf, dapr-fips, minio-fips, elastic-agent, zabbix-agent2-fips, influxd, bento, falcosidekick, beats, dapr, minio, zabbix-agent2, elastic-agent-fips, beats-fips, agentbeat-fips, agentbeat...
CVE-2025-10543 vulnerabilities
Vulnerabilities for packages: falcosidekick-fips, telegraf, dapr-fips, minio-fips, elastic-agent, zabbix-agent2-fips, influxd, bento, falcosidekick, beats, dapr, minio, zabbix-agent2, elastic-agent-fips, beats-fips, agentbeat-fips, agentbeat...
ROS-20251113-04
The MinIO object storage server vulnerability is related to flaws in the authorization mechanism. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...
ROS-20251113-03
The MinIO object storage server vulnerability is related to flaws in the authorization mechanism. Exploitation exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges...
SUSE CVE-2025-62506
MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS Security Token Service accounts with restricted session policies to bypass their inline policy restrictions when performin...
GO-2025-4034 MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio...
io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution
In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically substituted with their actual values during processing. This unintended behavior could lead to the exposure of sensitive information, including credentials,...
Important: Red Hat Security Advisory: Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available (RHBQ 3.27.0.GA)
An update for Red Hat Build of Apache Camel 4.14 for Quarkus 3.27 update is now available RHBQ 3.27.0.GA. The purpose of this text-only errata is to inform you about the enhancements that improve your developer experience and ensure the security and stability of your products. Red Hat Product...
Exploit for CVE-2025-62506
CVE-2025-62506 Vulnerability Verification Script !中文https...
CVE-2025-62506 vulnerabilities
Vulnerabilities for packages: minio...