CVE-2024-55949

Critical

Advisory

Published 16 Dec 2024In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.3; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 25; of 17,781 indexed, latest versions
Container images: 22; deployed by those charts
Fix available: 3 of 3; affected packages

Privilege escalation in IAM import API in MinIO

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 22 images.

Affected package	Affected versions	Fixed in	Images
miniobitnami	2022.12.12-0, 2023.12.23-0, 2023.12.23-1, 2024.7.4-0+1 more	2024.12.13	5
MinIObitnami	2023.12.23, 2023.12.23-1	2024.12.13	2
github.com/minio/miniogolang	v0.0.0-20220917000945-d89f6af6c4ab, v0.0.0-20221024183507-fc6c7949727e, v0.0.0-20221212192727-a469e6768df4, v0.0.0-20230112020616-7bc95c47a322+14 more	0.0.0-20241213221912-68b004a48f41	22

OSV records: BIT-minio-2024-55949 GHSA-cwq8-g58r-32hg
Also known as: GO-2024-3336

Charts affected

25 by stars

Chart

Latest

Affected images

Radar Score

milvusmilvus

4.0.31

1 of 5 See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	github.com/minio/minio@v0.0.0-20230320201618-05444a0f6af8	0.0.0-20241213221912-68b004a48f41

Open the chart page →

32,259

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20241213221912-68b004a48f41

Open the chart page →

11,933

baserowbaserow-chart

1.0.56

1 of 6 See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	minio@2024.7.4-0 github.com/minio/minio@v0.0.0-20240704142545-107d951893c3	2024.12.13 0.0.0-20241213221912-68b004a48f41

Open the chart page →

17,263

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	minio@2024.8.3-1 github.com/minio/minio@v0.0.0-20240803043323-6efb56851c40	2024.12.13 0.0.0-20241213221912-68b004a48f41

Open the chart page →

27,267

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	github.com/minio/minio@v0.0.0-20220917000945-d89f6af6c4ab	0.0.0-20241213221912-68b004a48f41

Open the chart page →

24,700

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20241213221912-68b004a48f41

Open the chart page →

7,273

feedbacksystemthm-mni-ii

0.47.1

1 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	minio@2023.12.23-0 MinIO@2023.12.23 github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	2024.12.13 2024.12.13 0.0.0-20241213221912-68b004a48f41

Open the chart page →

28,534

lgtm-stacklgtm-stack

0.1.3

1 of 8 See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	github.com/minio/minio@v0.0.0-20240118225128-19387cafab76	0.0.0-20241213221912-68b004a48f41

Open the chart page →

5,576

clowder2ncsa

1.9.7

1 of 12 See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	minio@2023.12.23-1 MinIO@2023.12.23-1 github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	2024.12.13 2024.12.13 0.0.0-20241213221912-68b004a48f41

Open the chart page →

37,373

wraftwraft

0.1.12

1 of 9 See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20241213221912-68b004a48f41

Open the chart page →

10,090

airbyteairbyte-v2

2.2.0

1 of 10 See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-11-20T22-40-07Z	b833a1699b4f	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	0.0.0-20241213221912-68b004a48f41

Open the chart page →

12,473

minioappscode

2026.9.11

1 of 1 See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	github.com/minio/minio@v0.0.0-20230112020616-7bc95c47a322	0.0.0-20241213221912-68b004a48f41

Open the chart page →

4,043

assemblylineassemblyline

7.4.17

1 of 12 See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	github.com/minio/minio@v0.0.0-20240111074616-099e88516dd6	0.0.0-20241213221912-68b004a48f41

Open the chart page →

12,898

ragflowbaboulinet

0.1.1

1 of 5 See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	github.com/minio/minio@v0.0.0-20231220010002-7a311a3b666a	0.0.0-20241213221912-68b004a48f41

Open the chart page →

5,823

miniod4n

5.2.1

1 of 2 See more

minio d4n 5.2.1

1 of the 2 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	github.com/minio/minio@v0.0.0-20240604192008-17fe91d6d162	0.0.0-20241213221912-68b004a48f41

Open the chart page →

2,629

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

1 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20241213221912-68b004a48f41

Open the chart page →

21,641

evi-miniointel

3.0.3

1 of 2 See more

evi-minio intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20241213221912-68b004a48f41

Open the chart page →

7,459

miniokubebb

5.0.10

1 of 2 See more

minio kubebb 5.0.10

1 of the 2 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20241213221912-68b004a48f41

Open the chart page →

7,459

miniomilvus-helm

8.0.19

1 of 1 See more

minio milvus-helm 8.0.19

1 of the 1 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	github.com/minio/minio@v0.0.0-20240528171904-f79a4ef4d0dc	0.0.0-20241213221912-68b004a48f41

Open the chart page →

1,529

minioopenobserve

5.0.7

1 of 2 See more

minio openobserve 5.0.7

1 of the 2 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20241213221912-68b004a48f41

Open the chart page →

7,459

miniosergiotocalini

1.0.0

1 of 1 See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20241213221912-68b004a48f41

Open the chart page →

4,203

mimirskyloud-helm-charts

5.5.1

1 of 5 See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20241213221912-68b004a48f41

Open the chart page →

10,651

servicexssl-hep

1.8.5

1 of 16 See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	minio@2022.12.12-0 github.com/minio/minio@v0.0.0-20221212192727-a469e6768df4	2024.12.13 0.0.0-20241213221912-68b004a48f41

Open the chart page →

66,266

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20241213221912-68b004a48f41

Open the chart page →

4,960

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2024-55949.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/minio/minio@v0.0.0-20240116160738-ca258c04cb1d	0.0.0-20241213221912-68b004a48f41

Open the chart page →

14,983

Container images carrying it

22 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20241213221912-68b004a48f41	2
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20241213221912-68b004a48f41	2
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20241213221912-68b004a48f41	2
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	minio@2023.12.23-1 MinIO@2023.12.23-1 github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	2024.12.13 2024.12.13 0.0.0-20241213221912-68b004a48f41	1
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	minio@2022.12.12-0 github.com/minio/minio@v0.0.0-20221212192727-a469e6768df4	2024.12.13 0.0.0-20241213221912-68b004a48f41	1
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	minio@2024.8.3-1 github.com/minio/minio@v0.0.0-20240803043323-6efb56851c40	2024.12.13 0.0.0-20241213221912-68b004a48f41	1
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	minio@2023.12.23-0 MinIO@2023.12.23 github.com/minio/minio@v0.0.0-20231223071911-496027b589c2	2024.12.13 2024.12.13 0.0.0-20241213221912-68b004a48f41	1
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	minio@2024.7.4-0 github.com/minio/minio@v0.0.0-20240704142545-107d951893c3	2024.12.13 0.0.0-20241213221912-68b004a48f41	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20241213221912-68b004a48f41	1
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	github.com/minio/minio@v0.0.0-20240528171904-f79a4ef4d0dc	0.0.0-20241213221912-68b004a48f41	1
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/minio/minio@v0.0.0-20240116160738-ca258c04cb1d	0.0.0-20241213221912-68b004a48f41	1
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	github.com/minio/minio@v0.0.0-20240118225128-19387cafab76	0.0.0-20241213221912-68b004a48f41	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	github.com/minio/minio@v0.0.0-20230320201618-05444a0f6af8	0.0.0-20241213221912-68b004a48f41	1
minio/minio :RELEASE.2023-11-20T22-40-07Z	b833a1699b4f	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	0.0.0-20241213221912-68b004a48f41	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20241213221912-68b004a48f41	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	github.com/minio/minio@v0.0.0-20230112020616-7bc95c47a322	0.0.0-20241213221912-68b004a48f41	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20241213221912-68b004a48f41	1
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	github.com/minio/minio@v0.0.0-20231220010002-7a311a3b666a	0.0.0-20241213221912-68b004a48f41	1
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	github.com/minio/minio@v0.0.0-20240111074616-099e88516dd6	0.0.0-20241213221912-68b004a48f41	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	github.com/minio/minio@v0.0.0-20220917000945-d89f6af6c4ab	0.0.0-20241213221912-68b004a48f41	1
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	github.com/minio/minio@v0.0.0-20240604192008-17fe91d6d162	0.0.0-20241213221912-68b004a48f41	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20241213221912-68b004a48f41	1