{"data":{"id":"6eae6fdb-ac9b-4bf8-976d-0b8d8ee1dbb3","title":"CVE-2026-69111: Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of service vulnerability that allows remote…","summary":"CVE-2026-69111 affects Milvus through 2.6.22 and 3.0.0. An unauthenticated remote attacker can send a crafted HTTP GET request to the management server on port 9091, reaching the unprotected /management/stop endpoint, which bypasses REST API authentication middleware. By supplying a 'role' parameter, the attacker can shut down the proxy, datanode, or querynode components, causing denial of service. The weakness is classified as CWE-306, and VulnCheck rates it CVSS 4.0 8.7 (HIGH), while NVD has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-69111","publishedAt":"2026-08-05T20:17:14.657Z","cveId":"CVE-2026-69111","cweIds":["CWE-306"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Milvus"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Milvus unauthenticated denial of service via /management/stop endpoint","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.01099,"epssCheckedAt":"2026-11-09T18:09:51.702Z","kevDateAdded":null,"advisoryAliases":["GHSA-fvg5-xr32-px64"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-09T12:10:49.882Z","patchAvailable":null,"disclosureDate":"2026-08-05T20:17:14.657Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-115"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}