CVE-2026-33419 | MinIO up to 0.0.0-20260212201848-7aac2a2c5b7c Security Token Service AccessKeyId/SecretAccessKey/SessionToken information exposure (GHSA-jv87-32hw-hh99)

A vulnerability identified as problematic has been detected in MinIO up to 0.0.0-20260212201848-7aac2a2c5b7c. This issue affects some unknown processing of the component Security Token Service. The manipulation of the argument AccessKeyId/SecretAccessKey/SessionToken leads to information exposure through error message.

This vulnerability is uniquely identified as CVE-2026-33419. The attack is possible to be carried out remotely. Moreover, an exploit is present.

It is suggested to install a patch to address this issue.