milvus-io has 2 CVEs on record. The median CVSS is 7.2 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 7.2
Publish → KEV: —
Last 90 days: 0 prev 1

Products

github.com/milvus-io/milvus 2

Follow milvus-io:RSS feed Save a search →Embed badge ↗

2

Total CVEs

1

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-26190Critical· 9.8Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise73
CVE-2026-10814Medium· 4.5milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery25

milvus-io vulnerabilities

CVEs affecting milvus-io, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-10814Medium· 4.5

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

milvus: RBAC grantee-id uses truncated MD5 (64-bit), enabling privilege-binding collisions and cross-role privilege forgery

▾ Sunlitmilvus-io · github.com/milvus-io/milvusEPSS 0.09%via OSV

CVE-2026-26190Critical· 9.8PoC

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

Milvus: Unauthenticated Access to Restful API on Metrics Port (9091) Leads to Critical System Compromise

▾ Abyssalmilvus-io · github.com/milvus-io/milvusEPSS 37%via OSV

milvus-io vulnerabilities (CVEs) · VulnSea