Zilliz Attu vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Zilliz Attu: 2 record(s), with affected versions and fixes.
CVE-2026-105049
Medium · 5.8
CWE-306 Oct 2, 2026
Missing Authentication for Critical Function in Zilliz Attu
Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public internet.
CVE-2026-105048
Medium · 4.0
CWE-1289 Oct 2, 2026
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to…
The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses).