VVolcengine

Products

Exploited and recent CVEs

• CVE-2026-22681 High 8.5 OpenViking < 0.3.4 SSRF via /api/v1/resources 0.3%
• CVE-2026-75480 Medium 6.5 OpenViking Debug Vector Endpoints Multi-tenant Data Exposure 0.4%
• CVE-2026-13507 Medium 5.0 volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity 0.2%
• CVE-2026-40525 Critical 9.1 OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI 0.6%
• CVE-2026-22680 Medium 5.3 OpenViking < 0.3.3 Missing Authorization via Task Polling 0.4%
• CVE-2026-34999 Medium 5.3 OpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access 0.4%
• CVE-2026-28518 High 7.8 OpenViking .ovpack Import ZIP Slip Path Traversal 0.2%
• CVE-2026-22207 Critical 9.8 OpenViking Missing root_api_key Allows Anonymous ROOT Access 0.5%