129 matches found
Milvus - Unauthenticated Metrics API Access
Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...
CVE-2025-64513
CVE-2025-64513 – PoC de Vulnerabilidad de Omisión de Autenticación en Milvus Proxy 📘 Resumen Este repositorio contiene un script de prueba de concepto PoC para verificar la existencia de CVE-2025-64513 , una vulnerabilidad crítica de omisión de autenticación en Milvus Proxy que puede permitir el...
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
milvus-auth-audit
milvus-auth-audit Milvus authentication security audit script. Detects three authentication flaws: Flaw| CVE| Affected versions| Detection method ---|---|---|--- sourceid backdoor auth bypass| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100 Arguments: --host: Milvus proxy...
BIT-MILVUS-2026-69111 Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stop
Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...
PT-2026-98996
Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...
Incorrect Authorization
Overview open-webui is an Open WebUI Affected versions of this package are vulnerable to Incorrect Authorization in the knowledge base delete handler process. An attacker can remove instance-wide configuration managed by administrators by sending a DELETE request to the relevant API endpoint with...
GO-2026-4833 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4827 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4834 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4835 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4826 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4837 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4828 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4831 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4841 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, milvus...
GO-2026-4830 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...
GO-2026-4832 vulnerabilities
Vulnerabilities for packages: k3s, rke2-runtime-fips, telegraf, rke2-runtime, prometheus-nats-exporter-fips, nats, nats-top, kine, nats-top-fips, nats-fips, prometheus-nats-exporter, milvus...