milvus-io/milvus Security Advisories | GitStock

low2026-06-04

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

GHSA-jh6h-v6mp-h22v · CVE-2026-10814

critical2026-02-11

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

GHSA-7ppg-37fh-vcr6 · CVE-2026-26190

critical2025-11-13

Milvus Proxy has a Critical Authentication Bypass Vulnerability

GHSA-mhjq-8c7m-3f7p · CVE-2025-64513