CVE-2026-122267

UNKNOWN 0.0

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read.

CWE	CWE-347
Vendor	chainguard
Product	minio
Published	Nov 5, 2026

Stay Ahead of the Next One

Get instant alerts for chainguard minio

Be the first to know when new unknown vulnerabilities affecting chainguard minio are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Chainguard / MinIO

0 ≤ RELEASE.2026-09-21T00-15-41Z

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/chainguard-forks/minio/security/advisories/GHSA-48rv-pgqh-mhjg

Credits

Oren Yomtov of Act Security