en
MinIO is a data-infrastructure company focused on high-performance, distributed object storage for enterprise AI and analytics. Its offerings provide S3-compatible storage and data services for private, edge, and cloud deployments, supporting organizations that operate data-intensive workloads.
As of 10/22/2026, MinIO recorded 1 security vulnerabilities in the last 90 days across 1 products, including 1 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, MinIO had the most security vulnerabilities in the MinIO ecosystem, with 1 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-97731CVE-2026-97731CVE-2026-42600MinIO: Path Traversal via msgpack Body in `ReadMultiple` Storage-REST EndpointCVE-2026-41145MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer UploadsCVE-2026-40344MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer UploadsCVE-2026-39414MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing33 Results | Page 1 of 4
| SeverityMedium |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityHigh |
| SeverityCritical |
| SeverityCritical |
| SeverityHigh |
| SeverityHigh |