CRITICAL9.8Go
GHSA-7ppg-37fh-vcr6· BIT-milvus-2026-26190, CVE-2026-26190Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
Modified: 7/20/2026
package
Go/github.com/milvus-io/milvus
pkg:go/github.com/milvus-io/milvus
MEDIUM4.5Go
GHSA-jh6h-v6mp-h22v· BIT-milvus-2026-10814, CVE-2026-10814milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery
Modified: 7/21/2026
CRITICALGo
GHSA-mhjq-8c7m-3f7p· BIT-milvus-2025-64513, CVE-2025-64513Milvus Proxy has a Critical Authentication Bypass Vulnerability
Modified: 2/20/2026
—Go
GO-2025-4114· BIT-milvus-2025-64513, CVE-2025-64513Milvus Proxy has a Critical Authentication Bypass Vulnerability in github.com/milvus-io/milvus
Modified: 2/20/2026
—Go
GO-2026-4481· BIT-milvus-2026-26190, CVE-2026-26190Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise in github.com/milvus-io/milvus
Modified: 2/19/2026
—Go
GO-2026-5999· BIT-milvus-2026-10814, CVE-2026-10814milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery in github.com/milvus-io/milvus
Modified: 7/21/2026