weaviate has 7 CVEs on record between 2023 and 2026. 1 was published in the last 90 days. The median CVSS is 7.2 (high). None have a confirmed exploitation report. Most affected products: Verba (3), github.com/weaviate/weaviate (2), weaviate (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.2
- Publish → KEV
- —
- Last 90 days
- 1 prev 3
Products
- Verba 3
- github.com/weaviate/weaviate 2
- weaviate 2
Worst active — by depth score
CVE-2026-65318High· 8.6Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader59CVE-2026-65317High· 8.6Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass59CVE-2023-38976High· 7.5Weaviate denial of service vulnerability42CVE-2026-105145Medium· 5.3A vulnerability has been found in Weaviate Verba up to 2.1.341CVE-2025-67818High· 7.2An issue was discovered in Weaviate OSS before 1.33.440
weaviate vulnerabilities
CVEs affecting weaviate, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-105145Medium· 5.3PoCA vulnerability has been found in Weaviate Verba up to 2.1.3
A vulnerability has been found in Weaviate Verba up to 2.1.3. Affected by this vulnerability is the function get_environment of the file goldenverba/components/util.py of the component generate_stream Endpoint. The manipulation leads to …
CVE-2026-65317High· 8.6PoCVerba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass
Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by suppl…
CVE-2026-65318High· 8.6PoCVerba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader
Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled UR…
CVE-2026-11500Medium· 5.0Weaviate has an Improper Authorization issue
Weaviate has an Improper Authorization issue
CVE-2025-67819Medium· 4.9An issue was discovered in Weaviate OSS before 1.33.4
An issue was discovered in Weaviate OSS before 1.33.4. Due to a lack of validation of the fileName field in the transfer logic, an attacker who can call the GetFile method while a shard is in the "Pause file activity" state and the FileR…
CVE-2025-67818High· 7.2An issue was discovered in Weaviate OSS before 1.33.4
An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the res…
CVE-2023-38976High· 7.5Weaviate denial of service vulnerability
Weaviate denial of service vulnerability