CVE-2026-26190 Scanner
CVE-2026-26190 Scanner - Authentication Bypass vulnerability in Milvus
Used 2.3k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2026-26190
9.8
CVSScritical
Exploitable remotely over the internet · no authentication required.
Description
Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath (default: by-dev), enabling arbitrary expression evaluation. The full REST API (/api/v1/*) is registered on the metrics/management port without any authentication, allowing unauthenticated access to all business operations including data manipulation and credential management. This vulnerability is fixed in 2.5.27 and 2.6.10.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
milvus
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: milvus
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →