milvus-auth-audit

milvus-auth-audit Milvus authentication security audit script. Detects three authentication flaws: Flaw| CVE| Affected versions| Detection method ---|---|---|--- sourceid backdoor auth bypass| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100 Arguments: --host: Milvus proxy...

ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

CVE-2025-64513

CVE-2025-64513 – Milvus Proxy Authentication Bypass Vulnerability PoC 📘 Overview This repository contains a proof-of-concept PoC script to verify the existence of CVE-2025-64513 , a critical authentication bypass vulnerability in Milvus Proxy that may allow unauthorized access to internal APIs...

GHSA-H4R6-C5RR-JCWM vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

CVE-2026-94637 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

GHSA-RVWR-5G7J-6PM8 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

CVE-2026-82458 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

CVE-2026-83663 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

GHSA-MH69-79FP-9FHM vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

CVE-2026-63772 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

GHSA-R5WC-GHWH-WJV9 vulnerabilities

Vulnerabilities for packages: opentelemetry-collector-contrib, milvus, opentelemetry-collector-contrib-fips...

Bounded Provisional Visibility: Controlling Poisoning Exposure in Continuously Ingested RAG Vector Stores

Continuous ingestion can expose new retrieval-augmented generation RAG content to retrieval before vetting completes, creating a temporal attack surface that conventional admission decisions do not capture. We present a fail-closed provisional-visibility protocol that admits new content under a...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102925 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102925 Source advisory: OSV:GHSA-P58F-9548-MPM2...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102937 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102937 Source advisory: OSV:GHSA-X78J-V8H9-3J2Q...

PT-2026-105864

Summary External knowledge connections are created and owned by administrators, and are shared by every external knowledge base bound to them. Deleting an external knowledge base also removed that connection from the instance configuration, with no check on the caller's role and no check for othe...

PT-2026-105874

Summary The built-in knowledge search tool returns knowledge bases the calling user has no access to. The tool works out which knowledge bases the caller may read and hands that set to the vector store as a search filter, and that filter is the only access control on the path. Most of the shipped...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102930 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102930 Source advisory: OSV:GHSA-94P9-XGH2-XP45...

c2cciutils (>=1.1.47, <=1.1.58), dai-python-commons (5.4.16) +4 more potentially affected by CVE-2026-102938 via virtualenv (20.26.6)

virtualenv PYPI version 20.26.6 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - c2cciutils =1.1.47, =0.20.0, =0.20.1 - rosettapy 0.2.3rc181.post1 Source cves: CVE-2026-102938 Source advisory: OSV:GHSA-9H9J-4VRJ-GF7G...

BIT-MILVUS-2026-69111 Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stop

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...