PT-2026-53163 · Undefined · Undefined

Published 2026-06-28 · Updated 2026-06-28 · CVE-2026-13507

NVD

CVSS v2.0

4.6

Medium

Base vector

AV:N/AC:H/Au:S/C:P/I:P/A:P

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str to uint64 of the file openviking/storage/vectordb/utils/str to uint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verification of data authenticity. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The pull request to fix this issue awaits acceptance.

Fix

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2026-13507

Affected Products

Undefined

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-13507 · Security Note
• https://github.com/volcengine/OpenViking/issues/2263 · Note
• https://github.com/volcengine/OpenViking/pull/2268 · Note
• https://vuldb.com/vuln/374515/cti · Note
• https://vuldb.com/cve/CVE-2026-13507 · Note
• https://vuldb.com/vuln/374515 · Note
• https://github.com/volcengine/OpenViking · Note
• https://vuldb.com/submit/838791 · Note