OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes

緊急 9.1CVE-2026-40525 · GHSA-jgq2-vq69-gr6h · PYSEC-2026-438 · 17/04/2026 公開 · 26/10/2026 更新

要点

CVE-2026-40525 は openviking, openviking (volcengine) に影響する深刻度「緊急」 (CVSS 9.1) の脆弱性です。
今後30日間に悪用される確率（EPSS）：0.57%（全脆弱性の 47.3% より高い）。
対処：0.3.9 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
openviking PyPI	`< 0.3.9`	`0.3.9`
openviking volcengine	`< 0.3.9`	`0.3.9`

概要

OpenViking prior to commit c7bb167 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api_key configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke privileged bot-control functionality without providing a valid X-API-Key header, including submitting attacker-controlled prompts, creating or using bot sessions, and accessing downstream tools, integrations, secrets, or data accessible to the bot.

NVD の説明

OpenViking prior to version 0.3.9 contains an authentication bypass vulnerability in the VikingBot OpenAPI HTTP route surface where the authentication check fails open when the api_key configuration value is unset or empty. Remote attackers with network access to the exposed service can invoke privileged bot-control functionality without providing a valid X-API-Key header, including submitting attacker-controlled prompts, creating or using bot sessions, and accessing downstream tools, integrations, secrets, or data accessible to the bot.