CVE-2025-67818
Last modified
CVE-2025-67818 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope.. EPSS estimates a 0.66% chance of exploitation in the next 30 days.
Description
An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Weaviate | Weaviate | < 1.33.4 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-67818?
How severe is CVE-2025-67818?
How do I fix CVE-2025-67818?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-67807The login mechanism of Sage DPW 2025_06_004 displays distinc…4.7
- CVE-2025-67809An issue was discovered in Zimbra Collaboration (ZCS) 10.0 a…4.7
- CVE-2025-6781The Copymatic – AI Content Writer & Generator plugin for Wor…4.3
- CVE-2025-67810In Area9 Rhapsode 1.47.3, an authenticated attacker can expl…6.5
- CVE-2025-67811Area9 Rhapsode 1.47.3 allows SQL Injection via multiple API …6.5
- CVE-2025-67813Quest KACE Desktop Authority through 11.3.1 has Insecure Per…5.3
- CVE-2025-67819An issue was discovered in Weaviate OSS before 1.33.4. Due t…4.9
- CVE-2025-6782The GoZen Forms plugin for WordPress is vulnerable to SQL In…7.5
- CVE-2025-67822A vulnerability in the Provisioning Manager component of Mit…9.4
- CVE-2025-67823A vulnerability in the Multimedia Email component of Mitel M…8.2
- CVE-2025-67824The WorklogPRO - Jira Timesheets plugin in the Jira Data Cen…6.1
- CVE-2025-67825An issue was discovered in Nitro PDF Pro for Windows before …5.5
Are you affected by CVE-2025-67818?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST