CVE-2026-40525 describes an authentication bypass in volcengine's OpenViking product before version 0.3.9. The vulnerability arises because the VikingBot OpenAPI HTTP route fails open when the api_key configuration value is missing or empty, allowing unauthenticated remote attackers to access privileged bot-control functionality. This includes submitting attacker-controlled prompts, managing bot sessions, and accessing sensitive downstream resources. The CVSS 4.0 score is 9.1 (critical), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality and integrity.

Exploitation of this vulnerability allows remote attackers to bypass authentication controls and perform privileged operations on the OpenViking bot, including executing arbitrary prompts and accessing sensitive integrations and secrets. This can lead to unauthorized data access and manipulation of bot-controlled resources, posing a critical security risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided and the remediation level is unspecified, users should verify if version 0.3.9 or later is available and apply it once confirmed. Until then, ensure the api_key configuration is properly set and not left empty to avoid the fail-open condition.