https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-42600.htmlhttps://patchthecve.com/cve/CVE-2026-42600.htmlWed, 17 Jun 2026 10:48:08 +0000MEDIUM 4.9: MinIO is a high-performance object storage system. From RELEASE.2022-07-24T01-54-52Z to before RELEASE.2026-04-14T21-32-45Z, A path traversal vulnerability in MinIO's ReadMultiple internode storage-REST endpoint allows a caller holding the cluster root JWT to read files from outside the configured dhttps://patchthecve.com/cve/CVE-2026-41145.htmlhttps://patchthecve.com/cve/CVE-2026-41145.htmlWed, 17 Jun 2026 10:46:14 +0000HIGH 8.2: MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's `STREAMING-UNSIGNED-PAYLOAD-TRAILER` code path allows any user who knows a valid access key to write arbitrary objehttps://patchthecve.com/cve/CVE-2026-40344.htmlhttps://patchthecve.com/cve/CVE-2026-40344.htmlWed, 17 Jun 2026 10:45:09 +0000HIGH 8.2: MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authentication bypass vulnerability in MinIO's Snowball auto-extract handler (`PutObjectExtractHandler`) allows any user who knows a valid access key to write arb