Milvus - Unauthenticated Metrics API Access

Milvus 2.5.27 and 2.6.10 contains an authentication bypass caused by weak default token and unauthenticated REST API on TCP port 9091, letting attackers perform arbitrary expression evaluation and data manipulation, exploit requires network access to port 9091. id: CVE-2026-26190 info: name: Milv...

GO-2026-4833 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4826 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4835 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4834 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4827 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4828 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4837 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4831 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4830 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4841 vulnerabilities

Vulnerabilities for packages: k3s, milvus, rke2-runtime-fips...

GO-2026-4832 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4836 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-4829 vulnerabilities

Vulnerabilities for packages: prometheus-nats-exporter-fips, telegraf, nats-top, nats, nats-top-fips, rke2-runtime-fips, k3s, milvus, prometheus-nats-exporter, kine, nats-fips, rke2-runtime...

GO-2026-5736 vulnerabilities

Vulnerabilities for packages: dapr, dapr-fips, etcd, milvus, rancher-support-bundle-kit, kcp-fips, kcp, multicluster-controlplane-fips, juicefs, multicluster-controlplane...

VulnCheck KEV: CVE-2026-26190

Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the /management/stop handler in the metrics management server on port 9091. An attacker can terminate the proxy, datanode, or querynode by sending a crafted HTTP GET request to...

CVE-2026-69111

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...