CVE-2026-26190: Milvus Rest Api Group Missing Authenticate Middleware
A gin Group has REST API handlers registered via `RegisterRoutesTo` without the `authenticate` middleware being applied to that group. When this group is mounted on the metrics/management gin engine (default TCP/9091), it exposes business endpoints (collection CRUD, credential management, search/query) without authentication — even when `common.security.auth
Gogreprules fetch cve-2026-26190-milvus-rest-api-group-missing-authenticate-middleware --engine opengrepDescription
A gin Group has REST API handlers registered via `RegisterRoutesTo` without the `authenticate` middleware being applied to that group. When this group is mounted on the metrics/management gin engine (default TCP/9091), it exposes business endpoints (collection CRUD, credential management, search/query) without authentication — even when `common.security.auth
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.