CVE-2026-26190 Milvus Allows Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
Unauthenticated access to Milvus metrics port allows arbitrary code execution and data manipulation via exposed REST APIs and debug endpoints.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-26190?
CVE-2026-26190 is a critical authentication bypass vulnerability in milvus-io milvus, published on 13 Feb 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath (default: by-dev), enabling arbitrary expression evaluation. The full REST API (/api/v1/*) is registered on the metrics/management port without any authentication, allowing unauthenticated access to all business operations including data manipulation and credential management. This vulnerability is fixed in 2.5.27 and 2.6.10.
Weakness: CWE-306
Which versions are affected by CVE-2026-26190?
6 open source packages ship an affected version, including github.com/milvus-io/milvus and milvus. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/milvus-io/milvus Go | All versions | None |
github.com/milvus-io/milvus Go | All versions | 2.5.27 |
github.com/milvus-io/milvus Go | All versions | 2.5.27 |
github.com/milvus-io/milvus Go | From 2.6.0 | 2.6.10 |
github.com/milvus-io/milvus Go | From 2.6.0 | 2.6.10 |
milvus Bitnami | All versions | 2.5.27, 2.6.10 |
Products include Milvus Milvus.
How do I fix CVE-2026-26190?
Upgrade github.com/milvus-io/milvus to a fixed version for your release line: 2.5.27 or 2.6.10.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2026-26190 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-26190 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in milvus-io milvus
Sources
Also known as BIT-milvus-2026-26190, GHSA-7ppg-37fh-vcr6, GO-2026-4481.