MinIO (S3 Select): A crafted S3 Select CSV query makes MinIO allocate memory without bound until the process is

Impact

A crafted S3 Select CSV query makes MinIO allocate memory without bound until the process is OOM-killed. One tenant issuing a single query takes down the shared object store for every job on the cluster.

Who can reach it

Any authenticated tenant that can issue S3 Select queries against the endpoint.

What to do

Upgrade to the release in GHSA-h749-fxx7-pwpg and restart the nodes. If S3 Select is not used by your workloads, deny SelectObjectContent in the bucket policy. Set a memory cgroup limit on the MinIO service so an allocation blowup restarts one node instead of destabilising the host.

References

Related entries

• RabbitMQ: super-stream binding-keys parsed before the permission check, one PUT kills the nodeCVE-2026-67408 · RabbitMQ (rabbitmq_stream_management super-stream binding-keys handler)High
• Jenkins Ivy Report Plugin: XXE in Ivy report parsing gives an authenticated user file read on the controllerCVE-2026-70448 · Jenkins Ivy Report Plugin (XML parser for Ivy report files)High
• Determined AI (master API, generic task kill/pause/unpause handlers): The generic task kill, pause and unpauseCVE-2026-75109 · Determined AI (master API, generic task kill/pause/unpause handlers)High
• Jenkins ThinBackup plugin: attacker redirects backups and pulls arbitrary controller files into themCVE-2026-84667 · Jenkins ThinBackup plugin (backup configuration writable via Stapler data binding)High
• Linux kernel nfsd: stale opcnt after compound release leaks adjacent slab memory through the RPC status netlink dumpCVE-2026-89691 · Linux kernel nfsd (nfsd4_release_compoundargs, RPC status netlink interface)High
• Linux kernel nfsd: dispatch error paths leave the status seqlock counter odd, exposing mutating compound stateCVE-2026-89705 · Linux kernel nfsd (nfsd_dispatch rq_status_counter seqlock protocol)High