CVE-2025-64513

CVE-2025-64513 – Milvus Proxy 认证绕过漏洞 PoC 📘 概述 本仓库包含一个概念验证（PoC）脚本，用于验证 CVE-2025-64513的存在性，该漏洞是Milvus Proxy 中的一个严重认证绕过漏洞 ，可能允许未经授权访问内部API。 当使用精心构造的sourceid标头发送未经认证的请求时，某些Milvus版本未能强制实施身份检查，导致可能完全未经授权访问 数据库元数据和集合信息。 ⚠️ 此PoC仅用于安全研究和防御性验证 。 请勿 在未经明确授权的系统上使用。 🚨 受影响版本 根据当前分析，以下Milvus版本受影响： 版本范围| 状态...

Improper Authentication

Milvus is vulnerable to Improper Authentication. The vulnerability is due to improper validation of the sourceID header in the Milvus Proxy component, which allows an attacker to bypass authentication and gain full administrative access to the Milvus cluster...

BIT-MILVUS-2025-64513 Milvus Proxy has Critical Authentication Bypass Vulnerability

Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the...

PT-2025-46212

Name of the Vulnerable Software and Affected Versions Milvus versions prior to 2.4.24 Milvus versions 2.5.0 through 2.5.20 Milvus versions 2.6.0 through 2.6.4 Description An unauthenticated attacker can bypass authentication mechanisms in the Milvus Proxy component, gaining full administrative...