OpenViking versions prior to 0.3.3 contain a missing authorization check on the task polling routes. The flaw permits unauthenticated callers to enumerate or retrieve background task metadata, including task type, status, associated resource identifiers, archive URIs, result payloads, and error information. The lack of access control can lead to cross‑tenant interference and the disclosure of confidential data in multi‑tenant deployments.

The Volcengine OpenViking component is affected. All releases older than version 0.3.3 are vulnerable and must be upgraded to a patched build.

The CVSS score of 6.9 indicates moderate severity, while an EPSS score below 1% suggests a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw by sending unauthenticated HTTP requests to the /api/v1/tasks and /api/v1/tasks/{task_id} endpoints. Because the endpoint is publicly accessible, automated scanners could enumerate tasks across tenants, potentially leaking sensitive information.