Weaviate Verba CVE-2026-105145

Remote, unauthenticated exploitation (PR:N, UI:N) against the generate_stream endpoint of a reachable Weaviate Verba instance running version 2.1.3 or earlier; triggering the get_environment function returns environment/configuration information to the caller. The practical limiting factor is network reachability - the Verba service must be exposed to the attacker (e.g., deployed without a front-end authentication/network control) - and impact is bounded to confidentiality only (VC:L / C:L), meaning partial information disclosure rather than code execution or data modification. No special non-default feature toggle is indicated by the description beyond having the vulnerable endpoint accessible.

This is a moderate-severity information-disclosure flaw (CWE-200) in Weaviate Verba, an open-source RAG application. The provided CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N) describes a remotely reachable, low-complexity, unauthenticated issue with only LOW confidentiality impact and no integrity or availability impact, yielding a base score of 6.9. The exploit-maturity metric E:P (Proof-of-Concept) is consistent with the reported publicly available POC (a gist). No EPSS score is provided and the CVE is NOT listed in CISA KEV, so there is no evidence of active, widespread exploitation - exploitation status is limited to publicly available exploit code. Signals are largely consistent: easy remote access and public POC raise the practical likelihood of opportunistic probing, but the impact ceiling is modest (partial information disclosure, VC:L, no write/destructive effect). The notable gap is vendor response: VulDB states the vendor was contacted but did not respond, so there is no vendor-confirmed patch or advisory, which increases uncertainty about fix availability and precise affected-version boundaries. Net: treat as a real but non-emergency priority - worth patching/mitigating promptly on any internet-exposed Verba instance, but not a drop-everything issue given low impact, niche deployment footprint, and absence of KEV/EPSS escalation signals.

An attacker who can reach a network-exposed Verba instance sends a request to the generate_stream endpoint, which invokes the vulnerable get_environment function in goldenverba/components/util.py and returns environment/configuration information back to the unauthenticated caller. A public proof-of-concept exploit exists (published as a gist), lowering the skill barrier for opportunistic attackers. Because the CVSS vector is AV:N/AC:L/PR:N/UI:N, no credentials, user interaction, or special timing are required.