Vulnerabilities in Volcengine

5 results

CVE-2026-40525CRITICALOpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPIEPSS 0.6%CVE-2026-22207CRITICALOpenViking Missing root_api_key Allows Anonymous ROOT AccessEPSS 0.4%CVE-2026-34999MEDIUMOpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated AccessEPSS 0.4%CVE-2026-22680MEDIUMOpenViking < 0.3.3 Missing Authorization via Task PollingEPSS 0.4%CVE-2026-28518HIGHOpenViking .ovpack Import ZIP Slip Path TraversalEPSS 0.2%