The server‑side request forgery flaw in the resources API of OpenViking allows an attacker who has authenticated low‑privilege credentials to submit arbitrary URLs. The server then performs outbound HEAD and GET requests with redirects enabled, which can reach loopback addresses, RFC 1918 or link‑local ranges, and cloud metadata services. The responses are returned through normal content APIs, enabling the attacker to enumerate and interact with internal services. Based on the description, it is inferred that the attacker can use this to discover services, exfiltrate information, and potentially leverage other internal vulnerabilities. The CWE classification for this weakness is CWE‑918.

Volcengine’s OpenViking installations with versions prior to 0.3.4 are affected. The vulnerability was fixed in the 0.3.4 release; any deployment using an earlier build must be considered vulnerable.

The CVSS score of 8.3 indicates high severity. The EPSS score is not available, but the absence of a KEV listing suggests that active exploitation is not yet observed. Exploitation requires the attacker to be able to authenticate to the service and submit a POST request to /api/v1/resources, which is typically accessible to regular users, making the attack vector relatively low‑effort from an internal or compromised account. Because the flaw results in internal network exposure rather than direct remote code execution, damage is confined to data and service availability within the victim’s private network, but the impact can be extensive if internal services are not properly segmented.