Weaviate vulnerabilities
We track 4 vulnerabilities in Weaviate products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2026.
Latest Weaviate vulnerabilities
- 8.6 High severity
Verba: Server-Side Request Forgery
Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocke
- 8.6 High severity
Verba: Server-Side Request Forgery
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by supplying a crafted Origin h
- 8.8 High severity
weaviate: Incorrect Privilege Assignment
Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role. The assignRoleToUser and assignRoleToGroup handlers (POST /authz/users/{id}/assign and /authz/groups/{id}/assign) aut
- 7.2 High severity
Weaviate: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup