MinIO SFTP authentication bypass due to improperly trusted SSH key

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-27414 · Microsoft / collected KEV context

EUVD-2025-5560

GHSA-wc79-7x8x-2p58

GO-2025-3495

cve-program · CVE-2025-27414

• https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58
• https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
• https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa

euvd · EUVD-2025-5560

• https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58
• https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
• https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa

nvd · CVE-2025-27414

• https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
• https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa
• https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58

osv · GHSA-wc79-7x8x-2p58

• https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58
• https://nvd.nist.gov/vuln/detail/CVE-2025-27414
• https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
• https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa
• https://github.com/minio/minio

osv · GO-2025-3495

• https://nvd.nist.gov/vuln/detail/CVE-2025-27414
• https://github.com/minio/minio/commit/4c71f1b4ec0fb2a473ddaac18c20ec9e63f267ec
• https://github.com/minio/minio/commit/91e1487de45720753c9e9e4c02b1bd16b7e452fa
• https://github.com/minio/minio/security/advisories/GHSA-wc79-7x8x-2p58

No related operational record is retained in the current change model.