Get real-time updates on Telegram
Verified
osv:BIT-MINIO-2025-62506: minio (exact versions not specified)
MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS. Fixed version: 2025.10.15.
Affected technology
minio · Exact affected versions not specified by the source
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source reports that an attacker could gain higher privileges under the conditions described by the source.
- Product
- minio
- KEV
- no
Provenance
- OSV.dev · Source record · observed 2026-10-08 08:57:13.774521+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-osv-bit-minio-2025-62506.html