CRITICAL🇵🇱 Wersja polska

CVE-2026-40525

CVSS 9.1v4.0pub. 2026-04-17upd. 2026-05-05

OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api_key configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke privileged bot-control functionality without providing a valid X-API-Key header, including submitting attacker-controlled prompts, creating or using bot sessions, and accessing downstream tools, integrations, secrets, or data accessible to the bot.

🇵🇱 Read Polish description →

🤖 AI Analysis

How it works

The authentication mechanism in VikingBot OpenAPI fails in 'fail open' mode when the api_key configuration value is unset or empty. In this situation, verification of the X-API-Key header is bypassed, and every network request is treated as authorized. A remote attacker with network access to the service can send requests without providing the correct API key and gain full access to bot control functions.

Impact

An attacker can send controlled prompts without authentication, create and use bot sessions, and gain access to tools, integrations, secrets, and data available to the bot, which may lead to sensitive data leakage and takeover of system functionality.

Mitigation & patch

OpenViking should be updated to version 0.3.9 or later, available at https://github.com/volcengine/OpenViking/releases/tag/v0.3.9. Additionally, ensure that the api_key configuration value is set to a non-empty, random, and strong value.

Who is affected

Volcengine OpenViking versions earlier than 0.3.9, in configurations where the api_key value is unset or empty.

Analysis generated by Claude AI (Anthropic) based on NVD data. Always verify with vendor.

CVSS Vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X