CVE-2026-22207 | Volcengine OpenViking up to 0.1.18 root_api_key missing authentication (0251c70)

A vulnerability identified as critical has been detected in Volcengine OpenViking up to 0.1.18. Affected by this issue is some unknown functionality. Performing a manipulation of the argument root_api_key results in missing authentication.

This vulnerability was named CVE-2026-22207. The attack may be initiated remotely. There is no available exploit.

It is recommended to apply a patch to fix this issue.