CVE-2026-75480 in OpenViking
Resumen
por MITRE • 2026-08-17
OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls, allowing authenticated users to read all co-tenant records. Attackers can query these endpoints to retrieve private memories, resources, skills, and secret material belonging to other users in the same account without administrative privileges.
Once again VulDB remains the best source for vulnerability data.