CVE-2025-31489

CVE-2025-31489 affects MinIO, an object storage solution, due to an invalid signature component in its authorization process. This allows an attacker with prior knowledge of an access-key and bucket name, and existing WRITE permissions, to upload arbitrary objects to buckets without proper authentication. The vulnerability carries a high CVSS score of 8.7, indicating a network-based attack with low complexity and high integrity impact, as it enables unauthorized data modification. While there is no evidence of active exploitation, a Nuclei template exists for detection, and the vulnerability is not listed in the KEV catalog.