CVE-2025-62506
2 advisories.
Go/github.com/minio/minio CVE-2025-62506: high 8.1, EPSS 0.55%
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS
Action: Upgrade github.com/minio/minio to 0.0.0-20251015170045-c1a49490c78e or later.
go get github.com/minio/minio@v0.0.0-20251015170045-c1a49490c78eAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20251015170045-c1a49490c78e |
Sources
- osv: GHSA-jjjj-jwhf-8rgr
- https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr
- https://nvd.nist.gov/vuln/detail/CVE-2025-62506
- https://github.com/minio/minio/issues/21647
- https://github.com/minio/minio/pull/21642
- https://github.com/minio/minio/commit/c1a49490c78e9c3ebcad86ba0662319138ace190
- https://github.com/minio/minio
- https://github.com/minio/minio/discussions/21655
- https://news.ycombinator.com/item?id=45684035
CVE-2025-62506 · published · modified · JSON
Go/github.com/minio/minio CVE-2025-62506: unknown, EPSS 0.55%
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio
Action: Upgrade github.com/minio/minio to 0.0.0-20251015170045-c1a49490c78e or later.
go get github.com/minio/minio@v0.0.0-20251015170045-c1a49490c78eAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20251015170045-c1a49490c78e |
Sources
- osv: GO-2025-4034
- https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr
- https://nvd.nist.gov/vuln/detail/CVE-2025-62506
- https://github.com/minio/minio/commit/c1a49490c78e9c3ebcad86ba0662319138ace190
- https://github.com/minio/minio/pull/21642
- https://github.com/minio/minio/issues/21647
- https://github.com/minio/minio/discussions/21655
- https://news.ycombinator.com/item?id=45684035
CVE-2025-62506 · published · modified · JSON