Weights \& Biases vulnerabilities
We track 1 vulnerability in Weights \& Biases products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Weights \& Biases vulnerabilities
- 8.8 High severity
weave: Improper Limitation of a Pathname to a Restricted Directory
The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the