Security Advisory

CVE-2025-15453

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-01-05 02:32:06

Last updated 2026-02-23 08:16:08

Assigner VulDB

CVSS score 5.3

State PUBLISHED

Description

A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the function expr.Exec of the file pkg/util/expr/expr.go of the component HTTP Endpoint. The manipulation of the argument code leads to deserialization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. A fix is planned for the next release 2.6.8.

← Browse all CVEs View on cve.org ↗