Verba vulnerabilities

2 known vulnerabilities in Verba from Weaviate. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  Verba: Server-Side Request Forgery

  CVE-2026-65318Jul 21, 2026Weaviate

  Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSocke

• 8.6 High severity

  Verba: Server-Side Request Forgery

  CVE-2026-65317Jul 21, 2026Weaviate

  Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by supplying a crafted Origin h