CVE-2026-69111

Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint,...

CVE-2026-69111

Milvus 2.6.22 and 3.0.0 are affected by an unauthenticated denial-of-service vulnerability. The issue resides in the management server (port 9091) where the unprotected /management/stop endpoint bypasses REST API authentication, allowing remote attackers to shut down components by passing a role ...