CVE-2026-113466 | MinIO up to RELEASE.2025-10-15T17-29-55Z Embedded Console cmd/common-main.go globalDeploymentID/SessionTokenAuthenticate hard-coded key

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, was found in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/common-main.go of the component Embedded Console. Such manipulation leads to use of hard-coded cryptographic key
. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is referenced as CVE-2026-113466. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More