← Database

CVE-2026-122267

N/A CVSS: N/A Published: 2026-11-05 Modified: 2026-11-05

Description

MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read.

Affected Platforms

Unknown

Weakness Type

CWE-347

References