~ / search / GHSA-7v39-2hx7-7c43

GHSA-7v39-2hx7-7c43

Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip

Source: GitHub Advisory Database (reviewed) High CVE-2025-67818

Packages

EcosystemPackageAffectedFixed in
Go github.com/weaviate/weaviate < 1.30.20 1.30.20
Go github.com/weaviate/weaviate >= 1.31.0-rc.0, < 1.31.19 1.31.19
Go github.com/weaviate/weaviate >= 1.32.0-rc.0, < 1.32.16 1.32.16
Go github.com/weaviate/weaviate >= 1.33.0-rc.0, < 1.33.4 1.33.4

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope.

References

External links from the advisory. They lead to third-party sites.