CVE-2025-62506
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio
Summary
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio
Affected packages
Go
github.com/minio/minio
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-20251015170045-c1a49490c78e"}]}]
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com
- report github.com
- web github.com
- web news.ycombinator.com