CVE-2024-24747

High

Advisory

Published 1 Feb 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.341; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 27; of 17,781 indexed, latest versions
Container images: 23; deployed by those charts
Fix available: 1 of 1; affected package

Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 23 images.

Affected package	Affected versions	Fixed in	Images
github.com/minio/miniogolang	v0.0.0-20200306033404-a1c7c9ea73d7, v0.0.0-20200421050159-282c9f790a03, v0.0.0-20200927172404-27d9bd04e544, v0.0.0-20201113003322-7549de034108+15 more	0.0.0-20240131185645-0ae4915a9391	23

OSV records: GHSA-xx8w-mq23-29g4
Also known as: BIT-minio-2024-24747, GO-2024-2499

Charts affected

27 by stars

Chart

Latest

Affected images

Radar Score

milvusmilvus

4.0.31

1 of 5 See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	github.com/minio/minio@v0.0.0-20230320201618-05444a0f6af8	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

32,259

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

11,933

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	github.com/minio/minio@v0.0.0-20220917000945-d89f6af6c4ab	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

24,700

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

7,273

oesopsmx

4.0.32

1 of 25 See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

107,811

feedbacksystemthm-mni-ii

0.47.1

1 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

28,534

lgtm-stacklgtm-stack

0.1.3

1 of 8 See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	github.com/minio/minio@v0.0.0-20240118225128-19387cafab76	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

5,576

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	github.com/minio/minio@v0.0.0-20200421050159-282c9f790a03	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

3,600

clowder2ncsa

1.9.7

1 of 12 See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

37,373

postgres-backuppostgres-backup

0.3.0

1 of 2 See more

postgres-backup postgres-backup 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
nerzhul/mc-arm64 :2020.10.03	4215df511f31	github.com/minio/minio@v0.0.0-20200927172404-27d9bd04e544	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

5,462

wraftwraft

0.1.12

1 of 9 See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

10,090

airbyteairbyte-v2

2.2.0

1 of 10 See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-11-20T22-40-07Z	b833a1699b4f	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

12,473

minioappscode

2026.9.11

1 of 1 See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	github.com/minio/minio@v0.0.0-20230112020616-7bc95c47a322	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

4,043

assemblylineassemblyline

7.4.17

1 of 12 See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	github.com/minio/minio@v0.0.0-20240111074616-099e88516dd6	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

12,898

ragflowbaboulinet

0.1.1

1 of 5 See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	github.com/minio/minio@v0.0.0-20231220010002-7a311a3b666a	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

5,823

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

1 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

21,641

mimir-openshift-experimentalgrafana

2.1.0

1 of 4 See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	github.com/minio/minio@v0.0.0-20210213070509-a94a9c37faf5	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

17,759

evi-miniointel

3.0.3

1 of 2 See more

evi-minio intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

7,459

miniokubebb

5.0.10

1 of 2 See more

minio kubebb 5.0.10

1 of the 2 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

7,459

apica-ascentlogiqai

2.0.4

1 of 19 See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	github.com/minio/minio@v0.0.0-20200306033404-a1c7c9ea73d7	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

23,613

minioopenobserve

5.0.7

1 of 2 See more

minio openobserve 5.0.7

1 of the 2 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

7,459

miniosergiotocalini

1.0.0

1 of 1 See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

4,203

mimirskyloud-helm-charts

5.5.1

1 of 5 See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

10,651

spinnakerspinnaker

2.2.13

1 of 4 See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

6,836

servicexssl-hep

1.8.5

1 of 16 See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	github.com/minio/minio@v0.0.0-20221212192727-a469e6768df4	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

66,266

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

4,960

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2024-24747.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/minio/minio@v0.0.0-20240116160738-ca258c04cb1d	0.0.0-20240131185645-0ae4915a9391

Open the chart page →

14,983

Container images carrying it

23 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20240131185645-0ae4915a9391	2
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20240131185645-0ae4915a9391	2
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20240131185645-0ae4915a9391	2
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240131185645-0ae4915a9391	2
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	0.0.0-20240131185645-0ae4915a9391	1
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	github.com/minio/minio@v0.0.0-20221212192727-a469e6768df4	0.0.0-20240131185645-0ae4915a9391	1
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	0.0.0-20240131185645-0ae4915a9391	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240131185645-0ae4915a9391	1
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	github.com/minio/minio@v0.0.0-20200421050159-282c9f790a03	0.0.0-20240131185645-0ae4915a9391	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	github.com/minio/minio@v0.0.0-20210213070509-a94a9c37faf5	0.0.0-20240131185645-0ae4915a9391	1
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	github.com/minio/minio@v0.0.0-20200306033404-a1c7c9ea73d7	0.0.0-20240131185645-0ae4915a9391	1
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/minio/minio@v0.0.0-20240116160738-ca258c04cb1d	0.0.0-20240131185645-0ae4915a9391	1
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	github.com/minio/minio@v0.0.0-20240118225128-19387cafab76	0.0.0-20240131185645-0ae4915a9391	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	github.com/minio/minio@v0.0.0-20230320201618-05444a0f6af8	0.0.0-20240131185645-0ae4915a9391	1
minio/minio :RELEASE.2023-11-20T22-40-07Z	b833a1699b4f	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	0.0.0-20240131185645-0ae4915a9391	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240131185645-0ae4915a9391	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	github.com/minio/minio@v0.0.0-20230112020616-7bc95c47a322	0.0.0-20240131185645-0ae4915a9391	1
nerzhul/mc-arm64 :2020.10.03	4215df511f31	github.com/minio/minio@v0.0.0-20200927172404-27d9bd04e544	0.0.0-20240131185645-0ae4915a9391	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240131185645-0ae4915a9391	1
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	github.com/minio/minio@v0.0.0-20231220010002-7a311a3b666a	0.0.0-20240131185645-0ae4915a9391	1
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	github.com/minio/minio@v0.0.0-20240111074616-099e88516dd6	0.0.0-20240131185645-0ae4915a9391	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	github.com/minio/minio@v0.0.0-20220917000945-d89f6af6c4ab	0.0.0-20240131185645-0ae4915a9391	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240131185645-0ae4915a9391	1