CVE-2026-13507Disclosure

LOWCVSS 2.3 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file openviking/storage/vectordb/utils/str_to_uint64.py of the component Local VectorDB Primary-key Label Handler. The manipulation of the argument ID results in insufficient verification of data authenticity. The attack may be launched remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The pull request to fix this issue awaits acceptance.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-345

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-13507 A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file openviking/storage/vectordb/utils/str_to_uint6… https://www.cve.org/CVERecord?id=CVE-2026-13507 ----- Traducción: CVE-2026-13507 Se … http://infoflow.cloud`
Post summary
The text announces CVE‑2026‑13507 as a detected vulnerability affecting Volcengine OpenViking, providing function details but no evidence of exploitation, PoC, or mitigation.
0000045
89 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
General
CVE-2026-13507 Insufficient Data Authenticity Verification in Volcengine OpenViking Up To 0.3.21 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-13507
Post summary
The post simply lists CVE‑2026‑13507 with a brief note and a link to a vulnerability database, providing no further technical or exploit details.
0000093
4.1K followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-13507 A vulnerability was detected in volcengine OpenViking up to 0.3.21. This affects the function str_to_uint64 of the file openviking/storage/vectordb/utils/str_to_uint6… https://www.cve.org/CVERecord?id=CVE-2026-13507
Post summary
CVE-2026-13507 was identified in volcengine OpenViking up to version 0.3.21, affecting the str_to_uint64 function, with basic technical details provided but no PoC, exploit, or patch announcement.
000001.1K
57.7K followersView on X

Explore more

Back to dashboard