EUVD-2026-23004
GHSA-xrwr-fcw6-fmq8
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Network-reachable web app, low-privilege project admin role required, scope changes to internal network, confidentiality limited to 200-char response fragment.
AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Primary rating from GitHub Advisory.
CVSS VectorGitHub Advisory
Lifecycle Timeline
6DescriptionGitHub Advisory
Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit permission (granted by the per-project "Administration" role) can configure machine translation service URLs pointing to arbitrary internal network addresses. During configuration validation, Weblate makes an HTTP request to the attacker-controlled URL and reflects up to 200 characters of the response body back to the user in an error message. This constitutes a Server-Side Request Forgery (SSRF) with partial response read. This issue has been fixed in version 5.17. If developers are unable to immediately upgrade, they can limit available machinery services via WEBLATE_MACHINERY setting.
AnalysisAI
Server-Side Request Forgery in Weblate's project-level machine translation configuration allows an authenticated project administrator to probe internal network services and read partial responses. Any user holding the per-project 'Administration' role (which grants project.edit permission) can supply a crafted URL as a machine translation service endpoint; during validation Weblate issues an outbound HTTP request to that URL and reflects up to 200 characters of the response body in the resulting error message. All Weblate deployments running versions prior to 5.17 are affected; no public exploit code exists and no active exploitation has been confirmed at time of analysis.
Technical ContextAI
Weblate (cpe:2.3:a:weblateorg:weblate:*:*:*:*:*:*:*:*) is a Django-based web localization platform distributed via PyPI. The machine translation subsystem allows project-level configuration of external service endpoints. The root cause (CWE-200, Information Disclosure via SSRF) is in the configuration-validation path: the BaseMachineTranslation class calls http_request() against a user-supplied URL without first checking whether the resolved destination is a private/loopback address, and the check_failure() method then extracts and surfaces up to 200 characters of the remote response body in the error message returned to the requesting user. The scope of the SSRF is internal-network reachability from the Weblate application server. The fix in 5.17 introduces an ALLOWED_MACHINERY_DOMAINS allowlist setting, passes allow_private_targets=False into validation calls, and suppresses error body reflection for untrusted hosts; the companion commit also adds validate_request_url() and is_allowlisted_hostname() utilities to enforce DNS-resolved peer-IP checks (with a noted fallback to hostname-only validation when an HTTP proxy is in use).
RemediationAI
Upgrade Weblate to version 5.17 or later, which is available via PyPI (pip install --upgrade weblate) and through the official Docker images. The vendor advisory is at https://github.com/WeblateOrg/weblate/security/advisories/GHSA-xrwr-fcw6-fmq8 and the fixing pull request is https://github.com/WeblateOrg/weblate/pull/18684. For deployments that cannot immediately upgrade, the official workaround is to restrict which machine translation backends are available by setting the WEBLATE_MACHINERY environment variable or Django setting to a fixed allowlist of known-good service classes, which prevents users from supplying arbitrary endpoint URLs. Additionally, restricting the 'Administration' role to fully trusted users limits the pool of potential abusers. Note that the fix's runtime private-IP blocking falls back to hostname-only validation when an HTTP proxy is configured, so proxy-based deployments should also apply the ALLOWED_MACHINERY_DOMAINS allowlist after upgrading.
Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter o
Privilege escalation in Weblate versions prior to 5.17 allows an authenticated low-privileged user to modify sensitive f
The package weblate from 0 and before 4.11.1 are vulnerable to Remote Code Execution (RCE) via argument injection when u
Weblate's REST API failed to enforce permission scope on team (group) assignments in all versions prior to 2026.7, allow
Remote code execution in Weblate's project backup restoration affects versions prior to 5.17, exploitable by authenticat
The wlc Weblate command-line client prior to version 1.17.2 is vulnerable to arbitrary file write attacks through path t
Arbitrary file read via symlink traversal in Weblate's App store metadata ZIP download affects all versions prior to 202
Arbitrary file read vulnerability in Weblate versions prior to 5.17 allows authenticated attackers to read sensitive fil
Weblate versions prior to 5.15.2 expose screenshot images through the web server without authentication controls, enabli
Path traversal in Weblate allows authenticated users to read arbitrary files outside the repository via the translation
Weblate versions up to 5.16.0 contains a vulnerability that allows attackers to an argument injection to `ssh-add` (CVSS
Unbounded regular expression evaluation in Weblate prior to 2026.7 allows any authenticated user holding the built-in 'E
Same weakness CWE-200 – Information Exposure
View allSame technique Information Disclosure
View allVendor StatusVendor
SUSE
Severity: LowShare
External POC / Exploit Code
Leaving vuln.today