MinIO · Vulnerability Disclosure

Minio Vulnerability Disclosure

Vulnerability disclosure

MinIO publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

Object StorageStorageS3 CompatibleCloud NativeKubernetesData InfrastructureAI StorageCompany
Program:

Disclosure Policy

Policy
https://github.com/minio/minio/blob/master/SECURITY.md

Security Contact

Contact
security@min.io
Contact
aead@min.io
Contact
harsha@min.io
Contact
dev@min.io

Source

Vulnerability Disclosure

minio-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-20'
method: searched
probe: true
source: https://github.com/minio/minio/blob/master/SECURITY.md
policy: [https://github.com/minio/minio/blob/master/SECURITY.md]
contact: [security@min.io, aead@min.io, harsha@min.io, dev@min.io]
bug_bounty: false
disclosure:
  acknowledgement: within 48 hours
  detailed_response: within 72 hours
  advisories_published_at: https://blog.min.io
  process: coordinated disclosure; fixes applied to latest release, advisory published on the blog
evidence:
- source: https://github.com/minio/minio/blob/master/SECURITY.md
  kind: security-policy
  keywords: [reporting a vulnerability, security@min.io, disclosure process, security advisory]