volcengine OpenViking vulnerabilities
8 published CVEs name volcengine OpenViking among the affected products.
- 8Published CVEs8 of them scored
- 8Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-22681
OpenViking < 0.3.4 SSRF via /api/v1/resources
Volcengine · OpenViking
High8.3 - CVE-2026-75480
OpenViking Debug Vector Endpoints Multi-tenant Data Exposure
volcengine · OpenViking
High7.1 - CVE-2026-13507
volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity
volcengine · OpenViking
Low2.3 - CVE-2026-40525
OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI
volcengine · OpenViking
Critical9.1 - CVE-2026-22680
OpenViking < 0.3.3 Missing Authorization via Task Polling
Volcengine · OpenViking
Medium6.9 - CVE-2026-34999
OpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access
Volcengine · OpenViking
Medium6.9 - CVE-2026-28518
OpenViking .ovpack Import ZIP Slip Path Traversal
Volcengine · OpenViking
High8.4 - CVE-2026-22207
OpenViking Missing root_api_key Allows Anonymous ROOT Access
Volcengine · OpenViking
Critical9.3