MinIO Java SDK: XML tag values substitute system properties and environment variables, exposing credentials

Impact

Before 8.6.0 the MinIO Java client expanded references to system properties and environment variables found in XML tag values while parsing. Any application that parses XML from an untrusted or attacker-influenced S3-compatible endpoint can therefore have its own process environment interpolated into the parsed values - which on a cluster means object-store access keys, tokens and file paths handed to whatever consumes the response. This matters for GPU fleets because training and inference jobs commonly read datasets and checkpoints through S3-compatible clients, and job environments are exactly where storage credentials live. The flaw is in the client library, not the MinIO server, so exposure depends on which of your Java-based data-path services bundle it.

Who can reach it

Requires the Java application to parse XML from a storage endpoint an attacker controls or can influence; no authentication to MinIO itself is implied. Not remotely reachable against a MinIO server.

What to do

Bump the minio-java dependency to 8.6.0 or later, rebuild and redeploy the affected Java services, then restart them. Inventory which in-house data-loading and storage services pull minio-java transitively - no node drain or firmware work is involved.

References

Related entries

• F5 BIG-IP (iHealth command / tmsh restricted shell): An authenticated attacker with at least a resource-administratorCVE-2025-61958 · F5 BIG-IP (iHealth command / tmsh restricted shell)High
• External Secrets Operator: BeyondTrust provider reads referenced Secrets across namespaces without validationCVE-2025-62159 · External Secrets Operator (BeyondTrust provider)High
• Semaphore UI: task_runner users override Ansible connection vars to run code as the server userCVE-2026-112305 · Semaphore UI (task environment JSON -> Ansible variable override)High
• GitLab CE/EE: stored XSS in analytics dashboard pagination controlsCVE-2026-15216 · GitLab CE/EE (analytics dashboard pagination controls)High
• GitLab CE/EE: stored XSS in analytics dashboard table cell renderingCVE-2026-15217 · GitLab CE/EE (analytics dashboard table cell rendering)High
• Sigstore Fulcio: OIDC discovery follows cross-host redirects and leaks ServiceAccount tokensCVE-2026-49478 · Sigstore Fulcio (OIDC discovery HTTP client, cross-host redirects)High