Oxford Nanopore Technologies MinKNOW

An attacker with network access to MinKNOW could bypass authentication, run unauthorized commands on the sequencing instrument, disrupt genetic sequencing operations, steal or alter research data, and halt laboratory processing.

This affects laboratory and medical research facilities using Oxford Nanopore MinKNOW for DNA/RNA sequencing. Any organization running MinKNOW versions before 24.11 on networked instruments should prioritize this update to prevent unauthorized access to sequencing data and instrument control.

An attacker on the network reaches MinKNOW over the network without needing valid credentials. By exploiting the authentication bypass vulnerabilities, the attacker gains command execution on the instrument, allowing them to manipulate sequencing parameters, stop ongoing runs, or exfiltrate research data.