Authentication Bypass

github.com/minio/minio is vulnerable to an Authentication Bypass. The vulnerability is due to improper signature verification in the STREAMING-UNSIGNED-PAYLOAD-TRAILER code path, which allows an attacker with knowledge of a valid access key to bypass authentication by supplying credentials throug...

CVE-2026-41145: Improper Authentication

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's STREAMING-UNSIGNED-PAYLOAD-TRAILER code path allows any user who knows a valid access key to write arbitrary...