Advisories · Technology
Volcengine OpenViking.
Every CVE that names Volcengine OpenViking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.3 High
OpenViking < 0.3.4 SSRF via /api/v1/resources
- Volcengine OpenViking
- Server-side request forgery (SSRF)
- CVSS 7.1 High
OpenViking Debug Vector Endpoints Multi-tenant Data Exposure
- volcengine OpenViking
- Broken access control
- CVSS 2.3 Low
volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity
- volcengine OpenViking
- CWE-345
- CVSS 6.9 Medium
OpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access
- Volcengine OpenViking
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
OpenViking Missing root_api_key Allows Anonymous ROOT Access
- Volcengine OpenViking
- Authentication bypass