CVE-2025-27414

MinIO SFTP authentication bypass due to improperly trusted SSH key in github.com/minio/minio

Summary

The description as published by the source.

MinIO SFTP authentication bypass due to improperly trusted SSH key in github.com/minio/minio.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/minio/minio from RELEASE.2024-06-06T09-36-42Z before RELEASE.2025-02-28T09-55-16Z.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Go github.com/minio/minio

[{"type":"SEMVER","events":[{"introduced":"0"}]}]

CWE-287