What is the CVSS score of CVE-2026-26190?

CVE-2026-26190 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.3%.

Which versions of AI / ML are affected by CVE-2026-26190?

Milvus vector databases in your environment are exposed to critical authentication bypass attacks through an unpatched default configuration, potentially allowing unauthorized access to sensitive…. A patch is available.

Is there a public PoC exploit available for CVE-2026-26190?

Yes, a public proof-of-concept exploit is available for CVE-2026-26190. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2026-26190?

Within 24 hours: Identify all Milvus instances in your environment and verify which are running vulnerable versions (pre-2.5.27 or pre-2.6.10); implement immediate network-level blocking of port 9091 from untrusted sources. Within 7 days: Apply vendor patches to upgrade all Milvus deployments to 2.5.27, 2.6.10, or later. Within 30 days: Conduct a security audit of all Milvus instances to ensure port 9091 is restricted, review access logs for unauthorized connection attempts, and validate patch deployment across all infrastructure.

AI / ML CVE-2026-26190

CRITICAL

Missing Authentication for Critical Function (CWE-306)

2026-02-13 security-advisories@github.com

GHSA-7ppg-37fh-vcr6

Authentication Bypass AI / ML Milvus Suse

9.8

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SUSE

CRITICAL

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:02 vuln.today

PoC Detected

Feb 18, 2026 - 19:11 vuln.today

Public exploit code

Patch released

Feb 18, 2026 - 19:11 nvd

Patch available

CVE Published

Feb 13, 2026 - 19:17 nvd

CRITICAL 9.8

DescriptionGitHub Advisory

Milvus is an open-source vector database built for generative AI applications. Prior to 2.5.27 and 2.6.10, Milvus exposes TCP port 9091 by default, which enables authentication bypasses. The /expr debug endpoint uses a weak, predictable default authentication token derived from etcd.rootPath (default: by-dev), enabling arbitrary expression evaluation. The full REST API (/api/v1/*) is registered on the metrics/management port without any authentication, allowing unauthenticated access to all business operations including data manipulation and credential management. This vulnerability is fixed in 2.5.27 and 2.6.10.

AnalysisAI

Unauthenticated API access in Milvus vector database before 2.5.27/2.6.10. TCP port 9091 exposed by default without authentication. EPSS 0.32% with PoC and patch available.

Technical ContextAI

CWE-306 in Milvus, a popular vector database for AI/ML applications. Default configuration exposes management port without auth.

RemediationAI

Update Milvus. Configure authentication. Restrict port 9091 access.

More in AI / ML

View all

CVE-2026-23744 CRITICAL Act Now POC

9.8 Jan 16

MCPJam Inspector versions 1.4.2 and earlier allow unauthenticated remote code execution through missing authentication i

CVE-2024-8859 HIGH Act Now POC

7.5 Mar 20

A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. Rated high severity (CVSS 7.5), this vulnerabilit

CVE-2026-27966 CRITICAL Act Now POC

9.8 Feb 26

Code injection in Langflow CSV Agent node before 1.8.0. The node hardcodes allow_dangerous_code=True, enabling arbitrary

CVE-2026-27597 CRITICAL Act Now POC

10.0 Feb 25

Sandbox escape in Enclave JavaScript sandbox before 2.11.1. Enclave is designed for safe AI agent code execution — the e

CVE-2026-22686 CRITICAL Act Now POC

10.0 Jan 14

enclave-vm JavaScript sandbox (before 2.7.0) has a critical sandbox escape. When a tool invocation fails, a host-side Er

CVE-2025-2828 CRITICAL Act Now POC

10.0 Jun 23

A remote code execution vulnerability in langchain-ai/langchain (CVSS 10.0). Risk factors: public PoC available. Vendor

CVE-2026-1470 CRITICAL Act Now POC

9.9 Jan 27

n8n has a fifth critical RCE vulnerability (CVSS 9.9) in the Expression evaluator, enabling code execution through craft

CVE-2026-24770 CRITICAL Act Now POC

9.8 Jan 27

Path traversal vulnerability in RAGFlow RAG engine version 0.23.1 allows unauthenticated attackers to read arbitrary fil

CVE-2026-22688 CRITICAL Act Now POC

9.9 Jan 10

WeKnora LLM framework (before 0.2.5) allows authenticated users to inject MCP stdio commands that the server executes as

CVE-2026-30861 CRITICAL Act Now POC

9.9 Mar 07

OS command injection in WeKnora from version 0.2.5 allows authenticated users to execute arbitrary system commands. CVSS

CVE-2026-29042 CRITICAL Act Now POC

9.8 Mar 06

Shell command injection in Nuclio serverless framework before 1.15.20. PoC and patch available.

CVE-2026-30860 CRITICAL Act Now POC

9.9 Mar 07

SQL injection in WeKnora LLM document understanding framework allows authenticated users to extract arbitrary database c

Same weakness CWE-306 – Missing Authentication for Critical Function

View all

CVE-2024-0012 CRITICAL POC

9.3

CVE-2017-10271 HIGH POC

7.5

CVE-2025-3248 CRITICAL POC

9.8

CVE-2024-11680 CRITICAL POC

9.8

CVE-2024-51567 CRITICAL POC

9.8

CVE-2025-0108 HIGH POC

8.8

CVE-2025-32433 CRITICAL POC

10.0

CVE-2016-2004 CRITICAL POC

9.8

Same technique Authentication Bypass

View all

CVE-2023-22515 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2013-2465 CRITICAL POC

9.8

CVE-2011-3544 CRITICAL POC

9.8

CVE-2022-40684 CRITICAL POC

9.8

CVE-2025-61882 CRITICAL POC

9.8

CVE-2024-0012 CRITICAL POC

9.3

CVE-2023-46805 HIGH POC

8.2

Vendor StatusVendor

SUSE

Severity: Critical

Product	Status
openSUSE Leap 15.6	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP5	Fixed
SUSE Linux Enterprise Module for Package Hub 15 SP6	Fixed
openSUSE Leap 15.5	Fixed

CVE-2026-26190 vulnerability details – vuln.today

Back

AI / ML CVE-2026-26190

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

AnalysisAI

Technical ContextAI

RemediationAI

More in AI / ML

Same weakness CWE-306 – Missing Authentication for Critical Function

Same technique Authentication Bypass

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code