ZoomEye finds 261,785 MinIO hosts exposed to default minioadmin risk

ZoomEye measurements from 28 October 2026 show 261,785 assets matching app="MinIO". MinIO's documentation lists minioadmin as the default for MINIO_ROOT_USER and MINIO_ROOT_PASSWORD, and the root account holds full administrative rights that policies cannot restrict.

• ZoomEye counted 261,785 assets matching app="MinIO" on 28 October 2026
• MINIO_ROOT_USER and MINIO_ROOT_PASSWORD default to minioadmin
• MinIO root user cannot be limited by policy like a regular identity
• The figure reflects deployments, not buckets open without credentials