{"id":"GO-2024-2499","revision":"e75525ec749f430daf4463e5c8c37a75","records":[{"revision":"e75525ec749f430daf4463e5c8c37a75","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2024-2499","aliases":["CVE-2024-24747","GHSA-xx8w-mq23-29g4"],"title":"Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio","description":"Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio","state":0,"publishedAt":"2024-06-28T15:28:53+00:00","modifiedAt":"2026-10-08T08:11:01.1099011+00:00","affected":[{"ecosystem":"Go","name":"github.com/minio/minio","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20240131185645-0ae4915a9391"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/minio/minio/security/advisories/GHSA-xx8w-mq23-29g4","https://nvd.nist.gov/vuln/detail/CVE-2024-24747","https://github.com/minio/minio/commit/0ae4915a9391ef4b3ec80f5fcdcf24ee6884e776","https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z"],"sourceUrl":"https://osv.dev/vulnerability/GO-2024-2499","license":"OSV · upstream source license applies","key":"osv:GO-2024-2499","identifiers":["GO-2024-2499","CVE-2024-24747","GHSA-xx8w-mq23-29g4"]},"retained":false,"historicalAffected":[]}],"coverage":[]}