Go/github.com/milvus-io/milvus CVE-2026-26190: critical 9.8, EPSS 39.26%
Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise
Action: Upgrade github.com/milvus-io/milvus to 2.5.27 or later.
go get github.com/milvus-io/milvus@v2.5.27go get github.com/milvus-io/milvus@v2.6.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.27 | - |
| 2.6.0 | 2.6.10 | - |
Fixed versions
| 2.5.27 | 2.6.10 |
Sources
- osv: GHSA-7ppg-37fh-vcr6
- https://github.com/milvus-io/milvus/security/advisories/GHSA-7ppg-37fh-vcr6
- https://github.com/milvus-io/milvus/commit/92b74dd2e286006a83b4a5f07951027b32e718a9
- https://github.com/milvus-io/milvus
- https://github.com/milvus-io/milvus/releases/tag/v2.5.27
- https://github.com/milvus-io/milvus/releases/tag/v2.6.10
CVE-2026-26190 · published · modified · JSON