Which versions of Verba are affected by EUVD-2026-47015?

Verba 2.1.3, Weaviate's open-source retrieval-augmented generation platform, contains a critical server-side request forgery vulnerability (CVSS 9.2) exploitable without authentication that enables…

How to fix or mitigate EUVD-2026-47015?

Within 24 hours: Conduct asset inventory of all Verba 2.1.3 instances and assess exposure to internal systems with database or cloud-credential access; disable unauthenticated WebSocket endpoints (/ws/import_files) where operationally feasible. Within 7 days: Implement network segmentation to restrict Verba's egress connectivity to only approved backend services; deploy WAF or transparent proxy rules to block unexpected outbound HTTP requests; review and rotate all database passwords and cloud API credentials with potential Verba access. Within 30 days: Continuously monitor Weaviate security advisories for patch releases and apply immediately upon availability; implement HTTP request logging and anomalous egress alerting; evaluate alternative RAG platforms if vendor patches are not released within 60 days.

Verba EUVD-2026-47015

Q: What is the CVSS score of EUVD-2026-47015?

EUVD-2026-47015 has a CVSS 4.0 base score of 9.2 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.4%.

| CVE-2026-65318 CRITICAL

Server-Side Request Forgery (SSRF) (CWE-918)

2026-07-21 disclosure@vulncheck.com

GHSA-245v-963x-ff5c

SSRF

9.2

CVSS 4.0 · Vendor: vulncheck

Severity by source

Vendor (vulncheck) PRIMARY

9.2 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.6 HIGH

Unauthenticated network SSRF (AV:N/AC:L/PR:N/UI:N) reads internal resources across a trust boundary, so S:C and C:H; no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Primary rating from Vendor (vulncheck).

CVSS VectorVendor: vulncheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 21, 2026 - 23:30 vuln.today

CVE Published

Jul 21, 2026 - 22:19 cve.org

CRITICAL 9.2

DescriptionCVE.org

Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocket import endpoint. Attackers can connect to the /ws/import_files WebSocket endpoint without authentication, specify arbitrary URLs in the HTMLReader configuration, and cause the server to fetch internal resources such as co-located database endpoints or cloud instance metadata services to retrieve sensitive credentials.

AnalysisAI

Server-side request forgery in Verba (Weaviate's open-source RAG application) version 2.1.3 lets unauthenticated attackers coerce the backend into issuing arbitrary HTTP GET requests to attacker-chosen URLs. By connecting to the unauthenticated /ws/import_files WebSocket endpoint and supplying a malicious URL in the HTMLReader configuration, an attacker can reach internal-only services such as co-located databases or cloud instance metadata endpoints to harvest credentials. No public exploit code has been identified at time of analysis, though a detailed technical disclosure exists; the CVSS 4.0 base score is 9.2 (Critical).

Technical ContextAI

Verba (also branded GoldenVerba / 'The Golden RAGtriever') is Weaviate's open-source Retrieval-Augmented Generation application that ingests documents into a vector database and exposes a chat interface. The affected component is the file-import pipeline: the /ws/import_files WebSocket endpoint accepts an HTMLReader configuration where the caller specifies a source URL, and the backend fetches that URL to scrape HTML content. Because the fetched URL is fully attacker-controlled and the request originates from the trusted server context, this is a textbook CWE-918 (Server-Side Request Forgery). The server's outbound reachability - internal service subnets, co-located database ports, and the cloud metadata service (e.g. 169.254.169.254 on AWS/GCP/Azure) - becomes exposed to the attacker even though those resources are not directly routable from the internet.

RemediationAI

No specific fixed version number was provided in the available data, so the status is: no vendor-released patched version independently confirmed at time of analysis - monitor the upstream repository at https://github.com/weaviate/Verba and the VulnCheck advisory (https://www.vulncheck.com/advisories/verba-goldenverba-unauthenticated-server-side-request-forgery-via-websocket-import-endpoint-htmlreader) for a tagged release, then upgrade to it. Until a patch is confirmed, apply compensating controls: place the Verba backend behind an authenticating reverse proxy or network ACL so the /ws/import_files WebSocket endpoint is not reachable by untrusted clients (trade-off: breaks anonymous/self-service import workflows); enforce egress filtering that blocks the server from reaching the cloud metadata IP 169.254.169.254 and internal database/service subnets, allowing only the specific external hosts imports legitimately need (trade-off: legitimate remote HTML imports may require an allowlist); and on AWS enforce IMDSv2 with a low hop limit to blunt metadata-credential theft even if SSRF succeeds (trade-off: requires SDK/agent IMDSv2 support). If URL-based HTML import is not needed, disable that feature entirely.