Zilliz Attu
2 CVEs affecting Zilliz Attu. Latest disclosed: 2026-10-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-105049 | Medium | 5.8 | 2026-10-02 | Zilliz Attu before 3.0.0 has a Playground feature that does not require authentication for proxying arbitrary HTTP and HTTPS requests to URLs on the public int… |
CVE-2026-105048 | Medium | 4.0 | 2026-10-02 | The Playground feature of Zilliz Attu before 3.0.0 allows SSRF (proxying of requests to private IP addresses). |