PT-2025-45835 · Go · Github.Com/Minio/Minio

Publicado 2025-10-30 · Atualizado 2025-10-30

OSV

MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio

Identificadores relacionados

GO-2025-4034

Produtos afetados

Github.Com/Minio/Minio

Referências · 8

• https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr · Nota
• https://github.com/minio/minio/discussions/21655 · Nota
• https://github.com/minio/minio/issues/21647 · Nota
• https://github.com/minio/minio/pull/21642 · Nota
• https://github.com/minio/minio/commit/c1a49490c78e9c3ebcad86ba0662319138ace190 · Nota
• https://news.ycombinator.com/item?id=45684035 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-62506 · Nota de Segurança
• https://osv.dev/vulnerability/GO-2025-4034 · Aviso do Fabricante