Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

CVE-2025-64513

CVE-2025-64513 – Milvus Proxy Authentication Bypass Vulnerability PoC 📘 Overview This repository contains a proof-of-concept PoC script to verify the existence of CVE-2025-64513 , a critical authentication bypass vulnerability in Milvus Proxy that may allow unauthorized access to internal APIs...

milvus-auth-audit

milvus-auth-audit Milvus authentication security audit script. Detects three authentication flaws: Flaw| CVE| Affected versions| Detection method ---|---|---|--- sourceid backdoor auth bypass| CVE-2025-64513| --port 19530 --mgmt-port 9091 --internal-port 53100 Arguments: --host: Milvus proxy...

GO-2026-4833 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4826 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4827 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4828 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4837 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4831 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4834 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4835 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4830 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4832 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: rke2-runtime-fips, milvus, k3s...

GO-2026-4836 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-4829 vulnerabilities

Vulnerabilities for packages: nats-fips, nats-top-fips, kine, nats-top, rke2-runtime, prometheus-nats-exporter, nats, milvus, k3s, prometheus-nats-exporter-fips, rke2-runtime-fips, telegraf...

GO-2026-5736 vulnerabilities

Vulnerabilities for packages: multicluster-controlplane, dapr, multicluster-controlplane-fips, dapr-fips, juicefs, rancher-support-bundle-kit, kcp-fips, milvus, kcp, etcd...

VulnCheck KEV: CVE-2026-26190

Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...