CVE-2025-67818
HighCVSS 7.2Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope.
Risk Assessment
An attacker could overwrite or create files in unauthorized locations, potentially leading to code execution, data disclosure, or system compromise.
Recommendation
Update Weaviate OSS to version 1.33.4 or later. Restrict data insertion privileges and regularly check file integrity.
Other vulnerabilities in Weaviate OSS
Original NVD description (English source)
An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS