CVE-2026-40525 is an authentication bypass vulnerability in volcengine's OpenViking product affecting versions before 0.3.9. The issue arises because the VikingBot OpenAPI HTTP route fails to enforce authentication properly when the api_key configuration is unset or empty, effectively failing open. This allows remote attackers with network access to bypass authentication and perform privileged operations such as controlling the bot, submitting arbitrary prompts, creating or using bot sessions, and accessing sensitive downstream resources. The vulnerability is categorized under CWE-636 (Not Failing Securely). The CVSS 4.0 score is 9.1, indicating critical severity. No official patch or remediation level has been published yet, and no known exploits are reported in the wild.

Successful exploitation allows unauthenticated remote attackers to bypass authentication controls and gain unauthorized access to privileged bot-control functionality. Attackers can submit arbitrary prompts, manipulate bot sessions, and access sensitive downstream tools, integrations, secrets, or data accessible to the bot. This could lead to significant confidentiality and integrity impacts on the affected system and its data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, ensure that the api_key configuration value is properly set and not left unset or empty to prevent the authentication check from failing open. Restrict network access to the VikingBot OpenAPI HTTP route to trusted users only as a temporary mitigation.