CVE-2025-15453

MediumCVSS 6.3

Published: 05/01/2026(UTC)Updated: 14/10/2026(UTC)Translated: 15/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

27th percentile - higher than 27% of all known CVEs

Summary

A security vulnerability was detected in milvus up to 2.6.7, affecting the function expr.Exec in the file pkg/util/expr/expr.go of the HTTP Endpoint component. Manipulation of the code argument leads to deserialization, and remote exploitation is possible.

Risk Assessment

A remote attacker can exploit deserialization to perform unauthorized operations, potentially leading to system compromise. The exploit has been publicly disclosed and may be used.

Recommendation

Plan to update to version 2.6.8 when available, and in the meantime restrict access to the HTTP endpoint and monitor for suspicious requests.

Other vulnerabilities in milvus

CVE-2026-69111High
Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability allowing remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint, which bypasses REST API authentication middleware, by supplying a 'role' parameter to shut down proxy, datanode, or querynode components.

Original NVD description (English source)

A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the function expr.Exec of the file pkg/util/expr/expr.go of the component HTTP Endpoint. The manipulation of the argument code leads to deserialization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. A fix is planned for the next release 2.6.8.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS