Skip to content
OpenAdvisories

Vendor

Weaviate

4 known vulnerabilities.

Products

Verba 3 weaviate 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.6
    CVE-2026-65318

    Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader

    Verba RAG application version 2.1.3 contains an unauthenticated server-side request forgery vulnerability that allows unauthenticated attackers to cause the backend to issue arbitrary HTTP GET requests by supplying attacker-controlled URLs through the WebSock…

    Weaviate Verba
  • High 8.6
    CVE-2026-65317

    Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass

    Verba RAG application version 2.1.3 contains a server-side request forgery vulnerability combined with a same-origin middleware bypass that allows unauthenticated remote attackers to make the server issue arbitrary HTTP requests by supplying a crafted Origin …

    Weaviate Verba
  • High 8.8
    CVE-2026-59093

    Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment

    Weaviate before 1.38.0 does not verify that a principal performing an RBAC role assignment holds the permissions granted by the assigned role. The assignRoleToUser and assignRoleToGroup handlers (POST /authz/users/{id}/assign and /authz/groups/{id}/assign) au…

    Weaviate weaviate