PT-2025-45835 · Go · Github.Com/Minio/Minio

Published 2025-10-30 · Updated 2025-10-30

OSV

MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio

Related Identifiers

GO-2025-4034

Affected Products

Github.Com/Minio/Minio

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-62506 · Security Note
• https://osv.dev/vulnerability/GO-2025-4034 · Vendor Advisory
• https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr · Note
• https://github.com/minio/minio/discussions/21655 · Note
• https://github.com/minio/minio/issues/21647 · Note
• https://github.com/minio/minio/pull/21642 · Note
• https://github.com/minio/minio/commit/c1a49490c78e9c3ebcad86ba0662319138ace190 · Note
• https://news.ycombinator.com/item?id=45684035 · Note