{"affected":[{"defaultStatus":"affected","ecosystem":"golang","packageName":"github.com/milvus-io/milvus","product":"milvus","source":"CNA: VulnCheck","vendor":"milvus-io","versions":[{"lessThanOrEqual":"2.6.22","status":"affected","version":"0","versionType":"semver"},{"status":"affected","version":"3.0.0","versionType":"semver"}]}],"cveId":"CVE-2026-69111","cwes":["CWE-306"],"description":"Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote attackers to terminate service components by sending a crafted HTTP GET request to the management server on port 9091. Attackers can exploit the unprotected /management/stop endpoint, which bypasses REST API authentication middleware, by supplying a 'role' parameter to shut down the proxy, datanode, or querynode components, resulting in denial of service.","epss":{"date":"2026-11-08","percentile":0.65868,"score":0.01099},"exploits":[{"kind":"exploit","source":"CNA: VulnCheck","url":"https://github.com/milvus-io/milvus/issues/50763"}],"kev":null,"metrics":[{"score":8.7,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0"},{"score":7.5,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}],"modifiedAt":1794146900807,"publishedAt":1785957503499,"references":[{"source":"CNA: VulnCheck","tags":["technical-description","exploit","issue-tracking"],"url":"https://github.com/milvus-io/milvus/issues/50763"},{"source":"CNA: VulnCheck","tags":["issue-tracking","patch"],"url":"https://github.com/milvus-io/milvus/pull/49847"},{"source":"CNA: VulnCheck","tags":["issue-tracking","patch"],"url":"https://github.com/milvus-io/milvus/pull/51573"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/milvus-unauthenticated-denial-of-service-via-management-stop"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/milvus-io/milvus/pull/49847"},{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/milvus-io/milvus/pull/51573"}],"revision":"c4a2dbcd89e3c16a8578c9ea18c9e2cd95b0e71d904e48273f32c46c75a2169f","sources":[{"modifiedAt":1794146900807,"name":"CNA: VulnCheck","retrievedAt":1794151303960,"url":"https://www.cve.org/CVERecord?id=CVE-2026-69111"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1794151307924,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-69111"}],"ssvc":{"assessedAt":1786026931346,"automatable":"yes","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stop","updatedAt":1794151307924}