VULNERABILITY INTELLIGENCE
CVE-2025-15453
CVSS score6.3 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2026-01-05
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Description
A security vulnerability has been detected in milvus up to 2.6.7. This vulnerability affects the function expr.Exec of the file pkg/util/expr/expr.go of the component HTTP Endpoint. The manipulation of the argument code leads to deserialization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. A fix is planned for the next release 2.6.8.
Weakness classification
- cna@vuldb.com: CWE-20