OpenViking versions from 0.2.5 up to but not including 0.2.14 contain a missing authentication check in the bot proxy router, a weakness categorized as CWE‑306. This allows attackers to send POST requests to /bot/v1/chat and /bot/v1/chat/stream without authentication and directly interact with the upstream bot backend protected by OpenViking. By exploiting this flaw, an adversary can issue arbitrary bot queries, retrieve responses, or abuse bot functionality without needing valid credentials.

The vulnerability affects Volcengine’s OpenViking product in all releases from version 0.2.5 through 0.2.13. Any deployment running one of these releases is susceptible to unauthenticated exploitation of the bot proxy endpoints.

The CVSS score of 6.9 indicates a Medium‑to‑High impact. The EPSS score is below 1%, suggesting a low likelihood of widespread exploitation at present, and the flaw is not listed in the CISA KEV catalog. Attacks require only simple HTTP POST requests to the specified endpoints and can be performed remotely without credentials, making the attack vector trivial for anyone with network access to the service.