CVE-2025-67818 - Weaviate Path Traversal File Write

CVE ID : CVE-2025-67818 Published : Dec. 12, 2025, 5:15 p.m. | 44 minutes ago Description : An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor