Skip to content
OpenAdvisories

Package · Go

github.com/milvus-io/milvus

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.5
    CVE-2026-10814

    milvus-io milvus Grantee ID Hash kv_catalog.go weak hash

    A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file internal/metastore/kv/rootcoord/kv_catalog.go of the component Grantee ID Hash Handler. The manipulation leads to use of weak hash. The attack…

    milvus-io milvus github.com/milvus-io/milvus Go
  • Critical 9.8
    CVE-2026-26190 Public exploit EPSS 39%

    Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

    Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication…

    milvus-io milvus github.com/milvus-io/milvus Go
  • Critical 9.3
    CVE-2025-64513 Public exploit

    Milvus Proxy has Critical Authentication Bypass Vulnerability

    Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gainin…

    milvus-io milvus github.com/milvus-io/milvus Go