{"id":"CVE-2026-122267","published":"2026-11-05T22:17:55.117","lastModified":"2026-11-05T22:17:55.117","description":"MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a presigned PUT URL be escalated into a cross-bucket read.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-347"],"vendors":[],"products":[],"references":[{"url":"https://github.com/chainguard-forks/minio/security/advisories/GHSA-48rv-pgqh-mhjg","tags":[]}],"exploitRefs":[{"url":"https://github.com/chainguard-forks/minio/security/advisories/GHSA-48rv-pgqh-mhjg","tags":[]}],"hasPoc":true,"ai":null}