GO-2026-4481
NoneCVSS
—
EPSS
—
Published
Feb 17, 2026
CISA due date
—
The record
Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise in github.com/milvus-io/milvus
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/milvus-io/milvus | 0 | No fix |
| Go | github.com/milvus-io/milvus | 0 | 2.5.27 |
| Go | github.com/milvus-io/milvus | 2.6.0 | 2.6.10 |
Related vulnerabilities
- CVE-2026-26190 Milvus is an open-source vector database built for generative AI applications. Same vulnerability
- GO-2025-4114 Milvus Proxy has a Critical Authentication Bypass Vulnerability in… Also affects github.com/milvus-io/milvus
- CVE-2025-64513 Milvus is an open-source vector database built for generative AI applications. Also affects github.com/milvus-io/milvus