minio has 5 CVEs on record between 2023 and 2026. The median CVSS is 8.0 (high), with 1 rated critical. 20% have been exploited in the wild — well above the 1% corpus average, so minio flaws are worth patching on sight.
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 20% vs 1% corpus
- Median CVSS
- 8.0
- Publish → KEV
- —(1)
- Last 90 days
- 0 prev 2
Products
- github.com/minio/minio 5
5
Total CVEs
1
Critical
1
CISA KEV
1
Exploited
Worst active — by depth score
CVE-2023-28434High· 8.8Privilege Escalation on Linux/MacOS75CVE-2025-31489HighMinIO performs incomplete signature validation for unsigned-trailer uploads54CVE-2026-33322CriticalMinIO has JWT Algorithm Confusion in OIDC Authentication52CVE-2026-39414HighMinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing41CVE-2026-34204High· 7.1MinIO is Vulnerable to SSE Metadata Injection via Replication Headers39
minio vulnerabilities
CVEs affecting minio, newest first. Open any entry for full detail, references, and exploit status.
5 CVEsRSS
CVE-2026-39414HighMinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing
▾ Twilightminio · github.com/minio/minioEPSS 0.48%via OSV
CVE-2026-34204High· 7.1MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
▾ Twilightminio · github.com/minio/minioEPSS 0.12%via OSV
CVE-2026-33322CriticalMinIO has JWT Algorithm Confusion in OIDC Authentication
MinIO has JWT Algorithm Confusion in OIDC Authentication
▾ Midnightminio · github.com/minio/minioEPSS 0.41%via OSV
CVE-2025-31489HighPoCMinIO performs incomplete signature validation for unsigned-trailer uploads
MinIO performs incomplete signature validation for unsigned-trailer uploads
▾ Midnightminio · github.com/minio/minioEPSS 2.4%via OSV
CVE-2023-28434High· 8.8CISA KEVPoCPrivilege Escalation on Linux/MacOS
Privilege Escalation on Linux/MacOS
▾ Abyssalminio · github.com/minio/minioEPSS 7.9%via OSV