{"data":{"id":"efd43ed7-c8a7-497d-83ee-31f0b49dbd00","title":"CVE-2025-67818: An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can…","summary":"CVE-2025-67818 affects Weaviate OSS before 1.33.4. An attacker who can insert data into the database can craft an entry name using an absolute path (such as /etc/...) or parent directory traversal (../../..), causing a backup restore to escape the restore root. This can create or overwrite files in arbitrary locations within the application's privilege scope. The weakness is classified as CWE-22.","solution":"Fixed in Weaviate OSS 1.33.4 or later. The vendor advisory is at https://weaviate.io/blog/weaviate-security-release-november-2025.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-67818","publishedAt":"2025-12-12T22:15:45.583Z","cveId":"CVE-2025-67818","cweIds":["CWE-22"],"cvssScore":"7.2","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/weaviate/weaviate@< 1.30.20 (fixed: 1.30.20)","github.com/weaviate/weaviate@>= 1.31.0-rc.0, < 1.31.19 (fixed: 1.31.19)","github.com/weaviate/weaviate@>= 1.32.0-rc.0, < 1.32.16 (fixed: 1.32.16)","github.com/weaviate/weaviate@>= 1.33.0-rc.0, < 1.33.4 (fixed: 1.33.4)"],"affectedPackageNames":["github.com/weaviate/weaviate"],"affectedPackageRefs":["go:github.com/weaviate/weaviate"],"affectedVendors":[],"affectedVendorsRaw":["Weaviate"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Weaviate OSS path traversal during backup restore","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00905,"epssCheckedAt":"2026-11-05T00:11:42.892Z","kevDateAdded":null,"advisoryAliases":["GHSA-7v39-2hx7-7c43"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:51:41.961Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-10-31T16:43:49.000Z","daysToFix":-42,"fixCheckedAt":"2026-10-29T21:42:18.988Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity"],"aiComponentTargeted":"rag","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"go","name":"github.com/weaviate/weaviate","fixedVersion":"1.32.16","matchedVersion":"v1.32.16","fixReleasedAt":"2025-10-31T16:43:49.000Z","daysToFix":-42,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:18.836Z"},{"ecosystem":"go","name":"github.com/weaviate/weaviate","fixedVersion":"1.30.20","matchedVersion":"v1.30.20","fixReleasedAt":"2025-11-03T08:26:41.000Z","daysToFix":-39,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:18.836Z"},{"ecosystem":"go","name":"github.com/weaviate/weaviate","fixedVersion":"1.33.4","matchedVersion":"v1.33.4","fixReleasedAt":"2025-11-03T09:12:22.000Z","daysToFix":-39,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:18.836Z"},{"ecosystem":"go","name":"github.com/weaviate/weaviate","fixedVersion":"1.31.19","matchedVersion":"v1.31.19","fixReleasedAt":"2025-11-03T08:42:34.000Z","daysToFix":-39,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:42:18.836Z"}]}}