CVE-2026-40525

OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api_key configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke privileged bot-control functionality without providing a valid X-API-Key header, including submitting attacker-controlled prompts, creating or using bot sessions, and accessing downstream tools, integrations, secrets, or data accessible to the bot.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/volcengine/OpenViking/commit/c7bb1676f4d037609f041bf39e4e2bd52e8f9820	Patch
https://github.com/volcengine/OpenViking/pull/1447	Exploit Patch Vendor Advisory
https://github.com/volcengine/OpenViking/releases/tag/v0.3.9	Release Notes
https://www.vulncheck.com/advisories/openviking-authentication-bypass-via-vikingbot-openapi	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:volcengine:openviking:*:*:*:*:*:*:*:*

History

26 Oct 2026, 00:10

Type	Values Removed	Values Added
Summary		(es) OpenViking anterior a la versión 0.3.9 contiene una vulnerabilidad de omisión de autenticación en la superficie de ruta HTTP de la OpenAPI de VikingBot donde la verificación de autenticación falla abierta cuando el valor de configuración de la API_key no está establecido o está vacío. Atacantes remotos con acceso de red al servicio expuesto pueden invocar funcionalidad privilegiada de control del bot sin proporcionar un encabezado X-API-Key válido, incluyendo el envío de indicaciones controladas por el atacante, la creación o el uso de sesiones de bot, y el acceso a herramientas, integraciones, secretos o datos posteriores accesibles para el bot.

Information

Published : 2026-04-17 19:16

Updated : 2026-10-26 00:10

NVD link : CVE-2026-40525

Mitre link : CVE-2026-40525

CVE.ORG link : CVE-2026-40525

JSON object : View

Products Affected

volcengine

openviking

CWE

CWE-636

Not Failing Securely ('Failing Open')

{"id": "CVE-2026-40525", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-40525", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-04-20T13:37:40.440711Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"repo": "https://github.com/volcengine/OpenViking", "vendor": "volcengine", "product": "OpenViking", "versions": [{"status": "affected", "version": "0", "lessThan": "0.3.9", "versionType": "semver"}, {"status": "unaffected", "version": "c7bb1676f4d037609f041bf39e4e2bd52e8f9820", "versionType": "git"}], "packageURL": "pkg:pypi/openviking", "defaultStatus": "unaffected"}]}], "published": "2026-04-17T19:16:39.017", "references": [{"url": "https://github.com/volcengine/OpenViking/commit/c7bb1676f4d037609f041bf39e4e2bd52e8f9820", "tags": ["Patch"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/volcengine/OpenViking/pull/1447", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/volcengine/OpenViking/releases/tag/v0.3.9", "tags": ["Release Notes"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/openviking-authentication-bypass-via-vikingbot-openapi", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-636"}]}], "descriptions": [{"lang": "en", "value": "OpenViking prior to version 0.3.9\u00a0contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api_key configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke privileged bot-control functionality without providing a valid X-API-Key header, including submitting attacker-controlled prompts, creating or using bot sessions, and accessing downstream tools, integrations, secrets, or data accessible to the bot."}, {"lang": "es", "value": "OpenViking anterior a la versi\u00f3n 0.3.9 contiene una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en la superficie de ruta HTTP de la OpenAPI de VikingBot donde la verificaci\u00f3n de autenticaci\u00f3n falla abierta cuando el valor de configuraci\u00f3n de la API_key no est\u00e1 establecido o est\u00e1 vac\u00edo. Atacantes remotos con acceso de red al servicio expuesto pueden invocar funcionalidad privilegiada de control del bot sin proporcionar un encabezado X-API-Key v\u00e1lido, incluyendo el env\u00edo de indicaciones controladas por el atacante, la creaci\u00f3n o el uso de sesiones de bot, y el acceso a herramientas, integraciones, secretos o datos posteriores accesibles para el bot."}], "lastModified": "2026-10-26T00:10:00.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:volcengine:openviking:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0CA71189-E366-4E88-B579-C76516A43FF3", "versionEndExcluding": "0.3.9"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}