PT-2026-53163 · Undefined · Undefined

Publicado 2026-06-28 · Atualizado 2026-06-28 · CVE-2026-13507

NVD

CVSS v2.0

4.6

Média

Vetor base

AV:N/AC:H/Au:S/C:P/I:P/A:P

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str to uint64 of the file openviking/storage/vectordb/utils/str to uint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verification of data authenticity. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The pull request to fix this issue awaits acceptance.

Correção

Insufficient Verification of Data Authenticity

Enumeração de Fraquezas

CWE-345

Identificadores relacionados

CVE-2026-13507

Produtos afetados

Undefined

Referências · 8

• https://github.com/volcengine/OpenViking/issues/2263 · Nota
• https://github.com/volcengine/OpenViking/pull/2268 · Nota
• https://vuldb.com/vuln/374515/cti · Nota
• https://vuldb.com/cve/CVE-2026-13507 · Nota
• https://vuldb.com/vuln/374515 · Nota
• https://github.com/volcengine/OpenViking · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-13507 · Nota de Segurança
• https://vuldb.com/submit/838791 · Nota