CVE-2026-75480 | BDVDB-2026-360736 Detail

Description#

OpenViking debug vector scroll and count endpoints apply only account-level scoping without user-level access controls, allowing authenticated users to read all co-tenant records. Attackers can query these endpoints to retrieve private memories, resources, skills, and secret material belonging to other users in the same account without administrative privileges.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-17Record published in the CVE List.
2. Version 22026-09-24Most recent update recorded in the CVE List.