Go/github.com/minio/minio CVE-2025-27414: medium, EPSS 0.59%
MinIO allows an SFTP authentication bypass due to improperly trusted SSH key
Action: Upgrade github.com/minio/minio to 0.0.0-20250227184332-4c71f1b4ec0f or later.
go get github.com/minio/minio@v0.0.0-20250227184332-4c71f1b4ec0fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.0-20240605075113-91e1487de457 | 0.0.0-20250227184332-4c71f1b4ec0f | - |
Fixed versions
| 0.0.0-20250227184332-4c71f1b4ec0f |
Sources
- osv: GHSA-wc79-7x8x-2p58
- https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58
- https://nvd.nist.gov/vuln/detail/CVE-2025-27414
- https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
- https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa
- https://github.com/minio/minio
CVE-2025-27414 · published · modified · JSON