CVE-2026-26190 | milvus-io milvus up to 2.5.26/2.6.9 Full REST API /expr missing authentication (GHSA-7ppg-37fh-vcr6)

A vulnerability was found in milvus-io milvus up to 2.5.26/2.6.9 and classified as critical. This affects an unknown part of the file /expr of the component Full REST API. The manipulation results in missing authentication.

This vulnerability is known as CVE-2026-26190. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.