UnratedFix available
Milvus v2.6.25
Type: patchSources: Milvus
Milvus v2.6.25 strengthens RBAC enforcement, adds an ImportBinlog privilege, and masks sensitive configuration values. It also hardens zstd decompression against oversized messages.
- Products
- Milvus
- Affected versions
- Not specified
- Fixed versions
- 2.6.25
- CVEs
- Not specified
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 29 Oct 2026, 06:30 UTC · Revision 1
Source evidence
Milvus v2.6.25 strengthens RBAC enforcement, adds an ImportBinlog privilege, and masks sensitive configuration values. It also hardens zstd decompression against oversized messages.
This release tightens security with stricter RBAC checks, a new ImportBinlog privilege, and masking of sensitive configuration values.
Milvus
Fixed versions: 2.6.25
Complete source record
{
"id": "0bb32455418bc4a406db34532efcaf7da9552c6bcaace01f8809f7c1bd8e66f7",
"url": "https://github.com/milvus-io/milvus/releases/tag/v2.6.25",
"method": "llm",
"payload": {
"kind": "patch",
"title": "Milvus v2.6.25",
"summary": "Milvus v2.6.25 strengthens RBAC enforcement, adds an ImportBinlog privilege, and masks sensitive configuration values. It also hardens zstd decompression against oversized messages.",
"evidence": "This release tightens security with stricter RBAC checks, a new ImportBinlog privilege, and masking of sensitive configuration values.",
"products": [
{
"name": {
"value": "Milvus",
"evidence": "Milvus Version"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.25",
"evidence": "2.6.25"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"fixed_cves": [],
"related_cves": [],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "github-milvus-io-milvus",
"document_id": 21781,
"published_at": "2026-10-20T07:46:14+00:00"
}