Milvus Security Update Advisory (CVE-2025-64513)

Overview

 

We have released a security update to address a vulnerability in Milvus. Users of affected products are advised to update to the latest version.
 

 

Affected Products

 

CVE-2025-64513

 

Milvus version: 2.less than 4.24
Milvus versions: 2.5.21 and earlier
Milvus version: 2.6.5 or lower

 

 

Resolved Vulnerabilities

 

Authentication Bypass Vulnerability in Milvus Proxy (CVE-2025-64513)

 

 

Vulnerability Patches

Vulnerability Patches have been made available in the latest update. Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2025-64513

 

Milvus Version: 2.4.24
Milvus version: 2.5.21
Milvus version: 2.6.5

 

 

References

 

[1] Critical Authentication Bypass Vulnerability in Milvus Proxy
https://github.com/milvus-io/milvus/security/advisories/GHSA-mhjq-8c7m-3f7p