9.8

CVE-2026-26190

Exploit

Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath (default: by-dev), enabling arbitrary expression evaluation. The full REST API (/api/v1/*) is registered on the metrics/management port without any authentication, allowing unauthenticated access to all business operations including data manipulation and credential management. This vulnerability is fixed in 2.5.27 and 2.6.10.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Milvus ≫ Milvus Version < 2.5.27
Milvus ≫ Milvus Version >= 2.6.0 < 2.6.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 27.66% 0.978
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security-advisories@github.com 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

https://github.com/milvus-io/milvus/security/advisories/GHSA-7ppg-37fh-vcr6
Vendor Advisory
Exploit
Mitigation
https://github.com/milvus-io/milvus/commit/92b74dd2e286006a83b4a5f07951027b32e718a9
Patch
https://github.com/milvus-io/milvus/releases/tag/v2.5.27
Product
Release Notes
https://github.com/milvus-io/milvus/releases/tag/v2.6.10
Product
Release Notes