Go/github.com/minio/minio CVE-2025-62506: high 8.1, EPSS 0.55%

MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio

Action: Upgrade github.com/minio/minio to 0.0.0-20251015170045-c1a49490c78e or later.

go get github.com/minio/minio@v0.0.0-20251015170045-c1a49490c78e

Affected

Fixed versions

Sources

• osv: GO-2025-4034
• nvd: CVE-2025-62506
• https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr
• https://github.com/minio/minio/commit/c1a49490c78e9c3ebcad86ba0662319138ace190
• https://github.com/minio/minio/pull/21642
• https://github.com/minio/minio/issues/21647
• https://github.com/minio/minio/discussions/21655
• https://news.ycombinator.com/item?id=45684035

CVE-2025-62506 · published 2025-10-30T15:02:33Z · modified 2026-10-08T08:11:02.678850834Z · JSON