Skip to content
OpenAdvisories

Package · PyPI

openviking

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.1
    CVE-2026-40525

    OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI

    OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api_key configuration value is unset or empty. Remote attackers with network acces…

    Volcengine OpenViking openviking PyPI
  • Medium 5.3
    CVE-2026-22680

    OpenViking < 0.3.3 Missing Authorization via Task Polling

    OpenViking versions prior to 0.3.3 contain a missing authorization vulnerability in the task polling endpoints that allows unauthorized attackers to enumerate or retrieve background task metadata created by other users. Attackers can access the /api/v1/tasks …

    Volcengine OpenViking openviking PyPI
  • High 7.8
    CVE-2026-28518

    OpenViking .ovpack Import ZIP Slip Path Traversal

    OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the intended import directory. Attackers can craft malicious ZIP archives with tra…

    Volcengine OpenViking openviking PyPI