Vulnerability · Published Nov 10, 2025 · Assigned by GitHub_M

CVE-2025-64513Milvus Proxy has Critical Authentication Bypass Vulnerability

Critical 9.3

In plain English

A critical-severity improper authentication in milvus from milvus-io. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)9.3Critical

Exploit odds (30 days)0.9%top 41.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modify, or delete data, and to perform privileged administrative operations such as database or collection management. This issue has been fixed in Milvus 2.4.24, 2.5.21, and 2.6.5. If immediate upgrade is not possible, a temporary mitigation can be applied by removing the sourceID header from all incoming requests at the gateway, API gateway, or load balancer level before they reach the Milvus Proxy. This prevents attackers from exploiting the authentication bypass behavior.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/milvus-io/milvus	2.4.24	GHSA-mhjq-8c7m-3f7p
Go	github.com/milvus-io/milvus	2.5.21	GHSA-mhjq-8c7m-3f7p
Go	github.com/milvus-io/milvus	2.6.5	GHSA-mhjq-8c7m-3f7p
Go	github.com/milvus-io/milvus	0.10.3-0.20251107071934-6102f001a971	GHSA-mhjq-8c7m-3f7p
Go	github.com/milvus-io/milvus	0.10.3-0.20251107071934-6102f001a971	GO-2025-4114

Affected products (as reported)

Vendor	Product	Versions
milvus-io	milvus	< 2.4.24>= 2.5.0, < 2.5.21>= 2.6.0, < 2.6.5

Weakness: CWE-287 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References

https://github.com/milvus-io/milvus/security/advisories/GHSA-mhjq-8c7m-3f7p x_refsource_CONFIRM
https://github.com/milvus-io/milvus/pull/45379 x_refsource_MISC
https://github.com/milvus-io/milvus/pull/45383 x_refsource_MISC
https://github.com/milvus-io/milvus/pull/45391 x_refsource_MISC