Minio vendor intelligence

Minio Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Minio products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
3
Known exploited vulnerabilities affecting Minio products
In CISA KEV
2
Records also listed in the official catalog
Beyond CISA KEV
1
Additional exploited vulnerability absent from CISA KEV
Sensor Observed
0
Minio KEVs with sensor-observed exploitation activity

The catalog gap matters for Minio exposure

One of the three exploited Minio vulnerabilities tracked by Previdian is not in CISA KEV. Teams relying on the official catalog alone would miss one-third of this vendor portfolio.

67%
Covered by CISA
33%
Beyond CISA
2
Product families

Attested Minio vulnerabilities

3 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2021-41266

Authentication bypass issue in the Operator Console

console High Beyond CISA 06 Jul 2025
CVE-2023-28432

Minio Information Disclosure in Cluster Deployment

minio Confirmed In CISA 21 Apr 2023
CVE-2023-28434

MinIO is vulnerable to privilege escalation on Linux/MacOS

minio Confirmed In CISA 19 Sep 2023

Showing 3 of 3 on this page (3 Minio known exploited vulnerabilities).

Recurring weakness patterns

Exposure, privilege management, and missing authentication for critical function account for three mapped occurrences across this Minio KEV portfolio.

Browse all KEVs →