Critical Authentication Bypass Vulnerability Found in Milvus Proxy (CVE-2025-64513, CVSS 9.3)

Milvus has disclosed a critical authentication bypass in its Proxy component, tracked as CVE-2025-64513 with a CVSS of 9.3, which allows unauthenticated attackers to gain administrative access and fully control affected Milvus deployments. According to Milvus team, the flaw arises from improper authentication logic that lets malicious actors bypass login controls by manipulating a specific request header.

Once exploited, attackers can read, modify or delete stored vectors and metadata and perform privileged administrative operations such as creating or deleting databases and collections. The Milvus team confirmed the issue has been fully patched, with fixed releases for 2.4.x (2.4.24), 2.5.x (2.5.21) and 2.6.x (2.6.5).

For those unable to upgrade immediately, a temporary mitigation is provided: remove the sourceID header from all incoming requests at the gateway, API gateway or load balancer level before they reach the Milvus Proxy, which blocks the authentication bypass vector until a permanent upgrade can be applied.