CVE-2026-22681 | Volcengine OpenViking up to 0.3.3 Resources API Endpoint /api/v1/resources server-side request forgery

August 21, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in Volcengine OpenViking up to 0.3.3. This affects an unknown part of the file /api/v1/resources of the component Resources API Endpoint. Performing a manipulation results in server-side request forgery.

This vulnerability was named CVE-2026-22681. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More