5
CVE-2026-13507
- EPSS 0.14%
- Veröffentlicht 28.06.2026 21:30:09
- Zuletzt bearbeitet 29.06.2026 18:41:05
- CVE-Watchlists
- Unerledigt
volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_to_uint64 data authenticity
A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file openviking/storage/vectordb/utils/str_to_uint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verification of data authenticity. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The pull request to fix this issue awaits acceptance.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
Herstellervolcengine
≫
Produkt
OpenViking
Version
0.3.0
Status
affected
Version
0.3.1
Status
affected
Version
0.3.2
Status
affected
Version
0.3.3
Status
affected
Version
0.3.4
Status
affected
Version
0.3.5
Status
affected
Version
0.3.6
Status
affected
Version
0.3.7
Status
affected
Version
0.3.8
Status
affected
Version
0.3.9
Status
affected
Version
0.3.10
Status
affected
Version
0.3.11
Status
affected
Version
0.3.12
Status
affected
Version
0.3.13
Status
affected
Version
0.3.14
Status
affected
Version
0.3.15
Status
affected
Version
0.3.16
Status
affected
Version
0.3.17
Status
affected
Version
0.3.18
Status
affected
Version
0.3.19
Status
affected
Version
0.3.20
Status
affected
Version
0.3.21
Status
affected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.14% | 0.036 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| cna@vuldb.com | 2.3 | 0 | 0 |
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
|
| cna@vuldb.com | 5 | 1.6 | 3.4 |
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
|
| cna@vuldb.com | 4.6 | 3.9 | 6.4 |
AV:N/AC:H/Au:S/C:P/I:P/A:P
|
CWE-345 Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
https://vuldb.com/vuln/374515
https://vuldb.com/vuln/374515/cti
https://vuldb.com/cve/CVE-2026-13507
https://vuldb.com/submit/838791
https://github.com/volcengine/OpenViking/issues/2263
https://github.com/volcengine/OpenViking/pull/2268
https://github.com/volcengine/OpenViking/