CVE-2025-62506

Скрипт проверки уязвимости CVE-2025-62506 Обзор Этот репозиторий содержит скрипт проверки для CVE-2025-62506 — уязвимости повышения привилегий в сервисных аккаунтах MinIO и аккаунтах STS Security Token Service. Описание уязвимости CVE-2025-62506 — это уязвимость повышения привилегий, которая...

Privilege Escalation

github.com/minio/minio is vulnerable to privilege escalation. The vulnerability is due to improper IAM session-policy validation, where restricted service or STS accounts can bypass inline policy checks when creating new service accounts, which allows an attacker to escalate privileges and gain...

Exploit for CVE-2025-62506

CVE-2025-62506 Vulnerability Verification Script !中文https...

CVE-2025-62506

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS Security Token Service accounts with restricted session policies to bypass their inline policy restrictions when performin...