Weaviate
Monthly
Server-side request forgery in Weaviate's Verba (GoldenVerba) RAG application version 2.1.3 lets unauthenticated remote attackers coerce the server into issuing arbitrary outbound HTTP GET requests. The flaw stems from a same-origin middleware bypass: any Origin header prefixed with a single quote defeats the localhost origin check, after which attacker-supplied host and port values passed to the /api/connect endpoint are fetched by the server. No public exploit code exists, but a detailed VulnCheck advisory and a third-party technical write-up document the exact bypass; there is no CISA KEV listing and EPSS was not provided.
Privilege escalation in Weaviate vector database versions before 1.38.0 allows a user holding only the delegated assign_and_revoke_users or assign_and_revoke_groups permission to grant the built-in admin role (or any high-privilege custom role) to itself or others, obtaining full administrative control of the database. The flaw stems from the role-assignment handlers checking only that the caller may assign roles to a target, but never verifying the caller actually holds the permissions being conferred - unlike role creation, which enforces permission subset checks. Reported by VulnCheck with a vendor patch in v1.38.0; no public exploit identified at time of analysis.
Information disclosure in Weaviate Verba 2.1.3 and earlier allows remote, unauthenticated attackers to retrieve environment and configuration data by invoking the get_environment function in goldenverba/components/util.py through the generate_stream endpoint. Publicly available exploit code exists (referenced in the VulDB disclosure and a public gist), raising the likelihood of opportunistic scanning, although there is no confirmation of active exploitation (not listed in CISA KEV). Impact is bound to confidentiality (partial disclosure), yielding a 6.9 CVSS v4.0 base score; the main practical prerequisite is that the Verba service be network-reachable.
Authorization bypass in Weaviate's Static API Key Handler (versions 1.37.0-1.37.7) stems from the validateConfig function failing to reject duplicate API keys mapped to distinct users, allowing key-to-user resolution to resolve ambiguously. An authenticated low-privilege attacker holding a duplicated key can authenticate to Weaviate and be resolved as an unintended user identity, bypassing user-level authorization controls. Publicly available exploit code exists (GitHub issue #11392), though the CVSS 4.0 score of 1.3 reflects high attack complexity and the authenticated, misconfiguration-dependent nature of the attack - no public exploitation or CISA KEV listing has been identified at time of analysis.
An arbitrary file read flaw in Weaviate OSS before 1.33.4 lets an attacker with high privileges (PR:H, authenticated with elevated access) read files accessible to the service process by abusing the unvalidated fileName field in the file-transfer logic of the FileReplicationService. Exploitation is not opportunistic: it requires the attacker to be able to invoke the GetFile method, a targeted shard to be in the transient 'Pause file activity' state, and the FileReplicationService to be network-reachable, which keeps the practical risk moderate (CVSS 4.9, EPSS 0.50%, 41st percentile) and confined to narrow windows. No public exploit code was identified and there is no indication of active exploitation; the vendor released a fix in 1.33.4.
Path traversal in Weaviate OSS before 1.33.4 allows a high-privileged user who can insert data into the database to craft an entry name containing an absolute path (such as /etc/...) or parent-directory sequences (../../..) that escapes the restore root during a backup restore, creating or overwriting files anywhere within the Weaviate process's privilege scope. The issue is rated CVSS 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), so exploitation is network-reachable but requires authenticated, high-privilege access and an in-use backup/restore workflow - it is not a remote-unauthenticated flaw against default configurations. Vendor-released patch: 1.33.4; no public exploit identified at time of analysis, and EPSS is 0.91% (59th percentile), consistent with a moderate-priority issue rather than an emergency.
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Server-side request forgery in Weaviate's Verba (GoldenVerba) RAG application version 2.1.3 lets unauthenticated remote attackers coerce the server into issuing arbitrary outbound HTTP GET requests. The flaw stems from a same-origin middleware bypass: any Origin header prefixed with a single quote defeats the localhost origin check, after which attacker-supplied host and port values passed to the /api/connect endpoint are fetched by the server. No public exploit code exists, but a detailed VulnCheck advisory and a third-party technical write-up document the exact bypass; there is no CISA KEV listing and EPSS was not provided.
Privilege escalation in Weaviate vector database versions before 1.38.0 allows a user holding only the delegated assign_and_revoke_users or assign_and_revoke_groups permission to grant the built-in admin role (or any high-privilege custom role) to itself or others, obtaining full administrative control of the database. The flaw stems from the role-assignment handlers checking only that the caller may assign roles to a target, but never verifying the caller actually holds the permissions being conferred - unlike role creation, which enforces permission subset checks. Reported by VulnCheck with a vendor patch in v1.38.0; no public exploit identified at time of analysis.
Information disclosure in Weaviate Verba 2.1.3 and earlier allows remote, unauthenticated attackers to retrieve environment and configuration data by invoking the get_environment function in goldenverba/components/util.py through the generate_stream endpoint. Publicly available exploit code exists (referenced in the VulDB disclosure and a public gist), raising the likelihood of opportunistic scanning, although there is no confirmation of active exploitation (not listed in CISA KEV). Impact is bound to confidentiality (partial disclosure), yielding a 6.9 CVSS v4.0 base score; the main practical prerequisite is that the Verba service be network-reachable.
Authorization bypass in Weaviate's Static API Key Handler (versions 1.37.0-1.37.7) stems from the validateConfig function failing to reject duplicate API keys mapped to distinct users, allowing key-to-user resolution to resolve ambiguously. An authenticated low-privilege attacker holding a duplicated key can authenticate to Weaviate and be resolved as an unintended user identity, bypassing user-level authorization controls. Publicly available exploit code exists (GitHub issue #11392), though the CVSS 4.0 score of 1.3 reflects high attack complexity and the authenticated, misconfiguration-dependent nature of the attack - no public exploitation or CISA KEV listing has been identified at time of analysis.
An arbitrary file read flaw in Weaviate OSS before 1.33.4 lets an attacker with high privileges (PR:H, authenticated with elevated access) read files accessible to the service process by abusing the unvalidated fileName field in the file-transfer logic of the FileReplicationService. Exploitation is not opportunistic: it requires the attacker to be able to invoke the GetFile method, a targeted shard to be in the transient 'Pause file activity' state, and the FileReplicationService to be network-reachable, which keeps the practical risk moderate (CVSS 4.9, EPSS 0.50%, 41st percentile) and confined to narrow windows. No public exploit code was identified and there is no indication of active exploitation; the vendor released a fix in 1.33.4.
Path traversal in Weaviate OSS before 1.33.4 allows a high-privileged user who can insert data into the database to craft an entry name containing an absolute path (such as /etc/...) or parent-directory sequences (../../..) that escapes the restore root during a backup restore, creating or overwriting files anywhere within the Weaviate process's privilege scope. The issue is rated CVSS 7.2 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), so exploitation is network-reachable but requires authenticated, high-privilege access and an in-use backup/restore workflow - it is not a remote-unauthenticated flaw against default configurations. Vendor-released patch: 1.33.4; no public exploit identified at time of analysis, and EPSS is 0.91% (59th percentile), consistent with a moderate-priority issue rather than an emergency.
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.