OP
Product
OpenViking
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 4Low 0
Watch
Add OpenViking to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-22207 | 9.8 | Feb 26 | OpenViking Missing root_api_key Allows Anonymous ROOT Access Affected: through 0.1.18 |
| CVE-2026-40525 | 9.1 | Apr 17 | OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI Affected: before 0.3.9 |
| CVE-2026-22681 | 8.5 | Aug 21 | OpenViking < 0.3.4 SSRF via /api/v1/resources Affected: before 0.3.4 |
| CVE-2026-28518 | 7.8 | Mar 3 | OpenViking .ovpack Import ZIP Slip Path Traversal Affected: through 0.2.1 |
| CVE-2026-75480 | 6.5 | Aug 17 | OpenViking Debug Vector Endpoints Multi-tenant Data Exposure Affected: through 0.4.14 |
| CVE-2026-22680 | 5.3 | Apr 7 | OpenViking < 0.3.3 Missing Authorization via Task Polling Affected: before 0.3.3 |
| CVE-2026-34999 | 5.3 | Apr 1 | OpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access Affected: 0.2.5 before 0.2.14 |
| CVE-2026-13507 | 5.0 | Jun 28 | volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity Affected: 0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.3.4; 0.3.5; +16 more |
Showing 8