PT-2026-8025 · Milvus · Milvus

0X1F + 2 · Published 2026-02-11 · Updated 2026-03-03 · CVE-2026-26190

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Milvus versions prior to 2.5.27 Milvus versions prior to 2.6.10

Description Milvus, an open-source vector database for generative AI applications, is affected by an issue that allows authentication bypasses. The software exposes TCP port 9091 by default, and the /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath (default: by-dev), enabling arbitrary expression evaluation. The full REST API (/api/v1/*) is registered on the metrics/management port without authentication, allowing unauthenticated access to all business operations, including data manipulation and credential management.

Recommendations Milvus versions prior to 2.5.27 should be upgraded to version 2.5.27 or later. Milvus versions prior to 2.6.10 should be upgraded to version 2.6.10 or later.

Exploit

Fix

RCE

Missing Authentication

Weakness Enumeration

CWE-1188

CWE-749

CWE-306

Related Identifiers

BIT-MILVUS-2026-26190

CVE-2026-26190

GHSA-7PPG-37FH-VCR6

GO-2026-4481

SUSE-SU-2026:0757-1

Affected Products

Milvus

References · 126

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26190.json · Exploit
• https://github.com/milvus-io/milvus/commit/92b74dd2e286006a83b4a5f07951027b32e718a9 · Patch
• https://github.com/milvus-io/milvus/security/advisories/GHSA-7ppg-37fh-vcr6 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-7ppg-37fh-vcr6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-26190 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26190 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0757-1 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-milvus-2026-26190 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2026-4481 · Vendor Advisory
• https://github.com/milvus-io/milvus · Note
• https://github.com/milvus-io/milvus/releases/tag/v2.6.10 · Note
• https://github.com/milvus-io/milvus/releases/tag/v2.5.27 · Note
• https://suse.com/security/cve/CVE-2026-25518 · Note
• https://suse.com/security/cve/CVE-2026-26014 · Note
• https://suse.com/security/cve/CVE-2017-18907 · Note