Skip to content
OpenAdvisories

Vendor

Volcengine

8 known vulnerabilities.

Products

OpenViking 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2026-22681

    OpenViking < 0.3.4 SSRF via /api/v1/resources

    OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting arbitrary URLs to the resources API endpoint. Attackers can POST a crafted URL to …

    Volcengine OpenViking
  • High 7.8
    CVE-2026-28518

    OpenViking .ovpack Import ZIP Slip Path Traversal

    OpenViking versions 0.2.1 and prior, fixed in commit 46b3e76, contain a path traversal vulnerability in the .ovpack import handling that allows attackers to write files outside the intended import directory. Attackers can craft malicious ZIP archives with tra…

    Volcengine OpenViking openviking PyPI