Volcengine CVEs & Vulnerabilities

1 CVEs affecting Volcengine products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

openviking 1

CVE-2026-34999MEDIUM

OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot proxy router that allows remote unauthenticated attackers to access protected bot proxy functionality by sending requests to the POST /bot/v1/chat and POST /bot/v1/chat/stream endpoints. Attackers can bypass authentication checks and interact directly with the upstream bot backend through the OpenViking proxy without providing valid credentials.

1 Apr 2026

5.3

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database