MinIO extractMetadataFromMime DoS

The vulnerability of the extractMetadataFromMime function in the MinIO storage server is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to cause service interruptions by sending specially crafted X-Minio-Replication- headers...

CVE-2026-34204

MinIO is a high-performance object storage system. Prior to version RELEASE.2026-03-26T21-24-40Z, a flaw in extractMetadataFromMime allows any authenticated user with s3:PutObject permission to inject internal server-side encryption metadata into objects by sending crafted X-Minio-Replication-...

MinIO authorization issue vulnerabilities

MinIO is an open-source object storage server developed by the American company MinIO. This product supports the creation of infrastructures for machine learning, analysis, and application data workloads. Versions prior to MinIO RELEASE.2026-03-26T21-24-40Z contained an authorization vulnerabilit...

CVE-2026-34204: Improper Authentication

MinIO is a high-performance object storage system. Prior to version RELEASE.2026-03-26T21-24-40Z, a flaw in extractMetadataFromMime allows any authenticated user with s3:PutObject permission to inject internal server-side encryption metadata into objects by sending crafted X-Minio-Replication-...