{"data":{"id":"6c1fcc37-6f9e-488f-8c27-6ff427c16c0d","title":"CVE-2026-10814: A vulnerability has been found in milvus-io milvus up to 2.6.13. This vulnerability affects unknown code of the file…","summary":"CVE-2026-10814 affects milvus-io milvus up to 2.6.13, specifically the Grantee ID Hash Handler component in internal/metastore/kv/rootcoord/kv_catalog.go. A manipulation leads to use of a weak hash. The attack must be performed locally, its complexity is rated high, and exploitability is considered difficult, but the exploit has been publicly disclosed and may be used.","solution":"Applying the patch with identifier 3d932f1c3e065351c4440c27abe1e6479752544d is the recommended action.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-10814","publishedAt":"2026-06-04T16:16:33.117Z","cveId":"CVE-2026-10814","cweIds":["CWE-327","CWE-328"],"cvssScore":"4.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/milvus-io/milvus@< 0.10.3-0.20260602041816-3d932f1c3e06 (fixed: 0.10.3-0.20260602041816-3d932f1c3e06)"],"affectedPackageNames":["github.com/milvus-io/milvus"],"affectedPackageRefs":["go:github.com/milvus-io/milvus"],"affectedVendors":[],"affectedVendorsRaw":["Milvus"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"milvus Grantee ID Hash Handler uses weak hash","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L","attackVector":"local","attackComplexity":"high","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00089,"epssCheckedAt":"2026-11-05T06:10:14.720Z","kevDateAdded":null,"advisoryAliases":["GHSA-jh6h-v6mp-h22v"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:53.559Z","patchAvailable":true,"disclosureDate":"2026-06-04T16:16:33.117Z","fixReleasedAt":"2026-06-02T04:18:16.000Z","daysToFix":-2,"fixCheckedAt":"2026-10-29T21:34:59.901Z","capecIds":["CAPEC-20"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["confidentiality","integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"go","name":"github.com/milvus-io/milvus","fixedVersion":"0.10.3-0.20260602041816-3d932f1c3e06","matchedVersion":"v0.10.3-0.20260602041816-3d932f1c3e06","fixReleasedAt":"2026-06-02T04:18:16.000Z","daysToFix":-2,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:59.755Z"}]}}