What’s Vulnerable › Products

Volcengine OpenViking vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your Volcengine OpenViking version is affected

Latest Volcengine OpenViking vulnerabilities

• CVE-2026-22681 — OpenViking < 0.3.4 SSRF via /api/v1/resources (CVSS 8.5)
• CVE-2026-75480 — OpenViking Debug Vector Endpoints Multi-tenant Data Exposure (CVSS 6.5)
• CVE-2026-13507 — volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity (CVSS 5.0)
• CVE-2026-40525 — OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI (CVSS 9.1)
• CVE-2026-22680 — OpenViking < 0.3.3 Missing Authorization via Task Polling (CVSS 5.3)
• CVE-2026-34999 — OpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access (CVSS 5.3)
• CVE-2026-28518 — OpenViking .ovpack Import ZIP Slip Path Traversal (CVSS 7.8)
• CVE-2026-22207 — OpenViking Missing root_api_key Allows Anonymous ROOT Access (CVSS 9.8)