CVE-2025-27414

Go/github.com/minio/minio CVE-2025-27414: medium, EPSS 0.59%

MinIO allows an SFTP authentication bypass due to improperly trusted SSH key

Action: Upgrade github.com/minio/minio to 0.0.0-20250227184332-4c71f1b4ec0f or later.

go get github.com/minio/minio@v0.0.0-20250227184332-4c71f1b4ec0f

Affected

Fixed versions

Sources

• osv: GHSA-wc79-7x8x-2p58
• https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58
• https://nvd.nist.gov/vuln/detail/CVE-2025-27414
• https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
• https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa
• https://github.com/minio/minio

CVE-2025-27414 · published 2025-03-03T19:56:58Z · modified 2026-10-08T08:11:01.883563908Z · JSON

Go/github.com/minio/minio CVE-2025-27414: unknown, EPSS 0.59%

MinIO SFTP authentication bypass due to improperly trusted SSH key in github.com/minio/minio

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2025-3495
• https://nvd.nist.gov/vuln/detail/CVE-2025-27414
• https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
• https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa
• https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58

CVE-2025-27414 · published 2025-03-03T19:22:09Z · modified 2026-10-08T08:11:01.883563908Z · JSON