CyberSec.Space Logo
返回 CVE 瀏覽器

CVE-2026-34204

HIGH
7.1
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2026-03-31
Last Modified2026-07-24
Data SourcesNVD

Vulnerability Description

MinIO is a high-performance object storage system. Prior to version RELEASE.2026-03-26T21-24-40Z, a flaw in extractMetadataFromMime() allows any authenticated user with s3:PutObject permission to inject internal server-side encryption metadata into objects by sending crafted X-Minio-Replication-* headers on a normal PutObject request. This issue has been patched in version RELEASE.2026-03-26T21-24-40Z.

Affected Platforms (CPE)

📦
Minio

Minio

< 2026-03-26t21-24-40z

References & Advisories

🔗 https://github.com/minio/minio/security/advisories/GHSA-3rh2-v3gr-35p9

相關漏洞威脅

CVE-2026-153789.3

A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Si...

CVE-2026-543529.6

Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at packages/server/src/api/routes/stati...

CVE-2026-394147.1

MinIO is a high-performance object storage system. From RELEASE.2018-08-18T03-49-57Z to before RELEASE.2025-12-20T04-58-37Z, MinIO...

CVE-2025-625068.1

MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation v...