Medium severity5.3NVD Advisory· Published Oct 20, 2026· Updated Oct 20, 2026

CVE-2026-113466

Description

A security vulnerability has been detected in MinIO up to RELEASE.2025-10-15T17-29-55Z. This issue affects the function globalDeploymentID/SessionTokenAuthenticate of the file cmd/common-main.go of the component Embedded Console. Such manipulation leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Minio/Embedded Consolellm-fuzzy
Range: <=RELEASE.2025-10-15T17-29-55Z

Patches

Vulnerability mechanics

References

github.com/zast-ai/vulnerability-reports/blob/main/minio/unauth_admin_takeover.mdnvd
vuldb.com/cve/CVE-2026-113466nvd
vuldb.com/submit/1004925nvd
vuldb.com/vuln/422691nvd
vuldb.com/vuln/422691/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000