minio vulnerabilities and fixes

Recent CVEs affecting minio, with upgrade or downgrade steps. 3 tracked.

minio has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-05-11. Highest priority: CVE-2026-40344 (score 43/100).

• CVE-2026-42600 MEDIUM 4.9 UPGRADE MinIO is a high-performance object storage system
• CVE-2026-41145 HIGH 8.2 UPGRADE MinIO is a high-performance object storage system
• CVE-2026-40344 HIGH 8.2 UPGRADE MinIO is a high-performance object storage system

FAQ

How do I fix minio vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is minio being exploited right now?

None of the tracked minio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which minio CVE should I patch first?

CVE-2026-40344 currently ranks highest (43/100): MinIO is a high-performance object storage system.

RSS feed for minio · ← Back to latest CVEs