CVE-2026-34999 OpenViking 0.2.5 < 0.2.14 Bot Proxy Endpoints Allow Unauthenticated Access

What is CVE-2026-34999?

CVE-2026-34999 is a medium-severity missing authorization vulnerability in Volcengine OpenViking, published on 1 Apr 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

OpenViking versions 0.2.5 prior to 0.2.14 contain a missing authentication vulnerability in the bot proxy router that allows remote unauthenticated attackers to access protected bot proxy functionality by sending requests to the POST /bot/v1/chat and POST /bot/v1/chat/stream endpoints. Attackers can bypass authentication checks and interact directly with the upstream bot backend through the OpenViking proxy without providing valid credentials.

Weakness: CWE-306

Which versions are affected by CVE-2026-34999?

It affects 1 product.

Products include Volcengine Openviking.

How do I fix CVE-2026-34999?

No fix has been published for CVE-2026-34999 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2026-34999 being exploited?

There is no known exploitation of CVE-2026-34999 in the wild and no public exploit code.

Other vulnerabilities in Volcengine OpenViking

• CVE-2026-40525 OpenViking < 0.3.9 Authentication Bypass via VikingBot OpenAPI Critical 9.1
• CVE-2026-28518 OpenViking .ovpack Import ZIP Slip Path Traversal High 8.4
• CVE-2026-22680 OpenViking < 0.3.3 Missing Authorization via Task Polling Medium 6.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-47xq-cq66-m24x.