CVE-2026-33419

unknown

Published 2026-03-20 · Modified 2026-05-05

CVSS v3

—

CVSS v2

—

VIR risk

—

Description

MinIO LDAP login brute-force via user enumeration and missing rate limit in github.com/minio/minio

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact

Ecosystem	Package	Vulnerable	Fixed
Go	github.com/minio/minio	`<=0.0.0-20260212201848-7aac2a2c5b7c`
Go	github.com/minio/minio

References

Verify integrity in audit chain (admin only). AS-IS.