CVE-2025-67819

MediumCVSS 4.9

Published: 12/12/2025(UTC)Updated: 14/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

41th percentile - higher than 41% of all known CVEs

Summary

A vulnerability in Weaviate OSS before 1.33.4. Lack of validation of the fileName field in transfer logic allows an attacker who can call GetFile while a shard is in 'Pause file activity' state and FileReplicationService is reachable to read arbitrary files accessible to the service process.

Risk Assessment

The risk includes unauthorized file read, potentially leading to leakage of sensitive data and confidentiality breaches.

Recommendation

Update Weaviate OSS to version 1.33.4 or later and restrict access to transfer methods.

Other vulnerabilities in Weaviate OSS

CVE-2025-67818High
An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope.

Original NVD description (English source)

An issue was discovered in Weaviate OSS before 1.33.4. Due to a lack of validation of the fileName field in the transfer logic, an attacker who can call the GetFile method while a shard is in the "Pause file activity" state and the FileReplicationService is reachable can read arbitrary files accessible to the service process.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS