GO-2025-4114
NoneCVSS
—
EPSS
—
Published
Nov 17, 2025
CISA due date
—
The record
Milvus Proxy has a Critical Authentication Bypass Vulnerability in github.com/milvus-io/milvus
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/milvus-io/milvus | 0 | 0.10.3-0.20251107071934-6102f001a971 |
| Go | github.com/milvus-io/milvus | 0.10.4 | 2.4.24 |
| Go | github.com/milvus-io/milvus | 2.5.0 | 2.5.21 |
| Go | github.com/milvus-io/milvus | 2.6.0 | 2.6.5 |
| go | github.com/milvus-io/milvus | 0.10.4 | 2.4.24 |
| go | github.com/milvus-io/milvus | 2.5.0 | 2.5.21 |
| go | github.com/milvus-io/milvus | 2.6.0 | 2.6.5 |
Related vulnerabilities
- CVE-2025-64513 Milvus is an open-source vector database built for generative AI applications. Same vulnerability
- GO-2026-4481 Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical… Also affects github.com/milvus-io/milvus
- CVE-2026-26190 Milvus is an open-source vector database built for generative AI applications. Also affects github.com/milvus-io/milvus