PT-2025-46212 · Milvus · Milvus

Published 2025-11-10 · Updated 2026-02-20 · CVE-2025-64513

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Milvus versions prior to 2.4.24 Milvus versions 2.5.0 through 2.5.20 Milvus versions 2.6.0 through 2.6.4

Description An unauthenticated attacker can bypass authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This allows the attacker to read, modify, or delete data, and perform administrative operations like database or collection management. The root cause is that setting the sourceid metadata to Base64("@@milvus-member@@") circumvents authentication checks. Approximately 6,000 systems are potentially affected.

Recommendations Upgrade to Milvus version 2.4.24 or later. Upgrade to Milvus version 2.5.21 or later. Upgrade to Milvus version 2.6.5 or later. As a temporary mitigation, remove the sourceID header from all incoming requests at the gateway, API gateway, or load balancer before they reach the Milvus Proxy.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BIT-MILVUS-2025-64513

CVE-2025-64513

GHSA-MHJQ-8C7M-3F7P

GO-2025-4114

Affected Products

Milvus

References · 33

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64513.json · Exploit
• https://osv.dev/vulnerability/GHSA-mhjq-8c7m-3f7p · Vendor Advisory
• https://osv.dev/vulnerability/BIT-milvus-2025-64513 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-64513 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-4114 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64513 · Security Note
• https://github.com/milvus-io/milvus/security/advisories/GHSA-mhjq-8c7m-3f7p · Note
• https://github.com/milvus-io/milvus/pull/45391 · Note
• https://github.com/milvus-io/milvus/pull/45383 · Note
• https://github.com/milvus-io/milvus/pull/45379 · Note
• https://github.com/milvus-io/milvus · Note
• https://github.com/milvus-io/milvus/commit/6102f001a971c8c8055a4a4cae704442d5cab793 · Note
• https://twitter.com/pulsepatchio/status/2024860637135004077 · Twitter Post
• https://twitter.com/_r_netsec/status/1992004635037663653 · Twitter Post
• https://t.me/RNetsec/22195 · Telegram Post