Read the docs
TI-2025-39904 Aliases CVE-2025-64513GHSA-mhjq-8c7m-3f7p

Milvus Proxy has Critical Authentication Bypass Vulnerability

Priority MEDIUM 50CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-287.

Summary

Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modify, or delete data, and to perform privileged administrative operations such as database or collection management. This issue has been fixed in Milvus 2.4.24, 2.5.21, and 2.6.5. If immediate upgrade is not possible, a temporary mitigation can be applied by removing the sourceID header from all incoming requests at the gateway, API gateway, or load balancer level before they reach the Milvus Proxy. This prevents attackers from exploiting the authentication bypass behavior.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00869 58th percentileScored 2026-11-07
Fix Fixed milvus (milvus-io): 2.4.24, 2.5.21, 2.6.5github.com/milvus-io/milvus (Go): 2.4.24, 2.5.21, 2.6.5 +1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
milvus-iomilvusbefore 2.4.24; 2.5.0 to before 2.5.21; 2.6.0 to before 2.6.52.4.24, 2.5.21, 2.6.5Patch availableCNA
—github.com/milvus-io/milvus (Go)0.10.4 to before 2.4.242.4.24Patch availableGHSA-mhjq-8c7m-3f7p
—github.com/milvus-io/milvus (Go)2.5.0 to before 2.5.212.5.21Patch availableGHSA-mhjq-8c7m-3f7p
—github.com/milvus-io/milvus (Go)2.6.0 to before 2.6.52.6.5Patch availableGHSA-mhjq-8c7m-3f7p
—github.com/milvus-io/milvus (Go)before 0.10.3-0.20251107071934-6102f001a9710.10.3-0.20251107071934-6102f001a971Patch availableGHSA-mhjq-8c7m-3f7p
  • milvus Vendormilvus-io Affected before 2.4.24; 2.5.0 to before 2.5.21; 2.6.0 to before 2.6.5 Fixed in 2.4.24, 2.5.21, 2.6.5 Patch available CNA
  • github.com/milvus-io/milvus (Go) Vendor— Affected 0.10.4 to before 2.4.24 Fixed in 2.4.24 Patch available GHSA-mhjq-8c7m-3f7p
  • github.com/milvus-io/milvus (Go) Vendor— Affected 2.5.0 to before 2.5.21 Fixed in 2.5.21 Patch available GHSA-mhjq-8c7m-3f7p
  • github.com/milvus-io/milvus (Go) Vendor— Affected 2.6.0 to before 2.6.5 Fixed in 2.6.5 Patch available GHSA-mhjq-8c7m-3f7p
  • github.com/milvus-io/milvus (Go) Vendor— Affected before 0.10.3-0.20251107071934-6102f001a971 Fixed in 0.10.3-0.20251107071934-6102f001a971 Patch available GHSA-mhjq-8c7m-3f7p

Remediation

  • Fix · CNA milvus (milvus-io) Fixed in 2.4.24, 2.5.21, 2.6.5
  • Fix · GHSA-mhjq-8c7m-3f7p github.com/milvus-io/milvus (Go) Fixed in 2.4.24 Advisory →
  • Fix · GHSA-mhjq-8c7m-3f7p github.com/milvus-io/milvus (Go) Fixed in 2.5.21 Advisory →
  • Fix · GHSA-mhjq-8c7m-3f7p github.com/milvus-io/milvus (Go) Fixed in 2.6.5 Advisory →
  • Fix · GHSA-mhjq-8c7m-3f7p github.com/milvus-io/milvus (Go) Fixed in 0.10.3-0.20251107071934-6102f001a971 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-64513
  2. 2026-10-03 Alias added: GHSA-mhjq-8c7m-3f7p

References

Advisory 1

Other 6

  • TI-2026-48516 Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stop CVSS 4.0HIGH 8.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences