Vulnerabilities in Weaviate
4 resultsCVE-2026-59093HIGHWeaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role AssignmentEPSS 0.7%CVE-2026-65317CRITICALVerba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware BypassEPSS 0.6%CVE-2026-65318CRITICALVerba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReaderEPSS 0.6%CVE-2026-105145MEDIUMWeaviate Verba generate_stream Endpoint util.py get_environment information disclosureEPSS 0.3%