Executive brief
Weaviate OSS has path traversal vulnerability via the Shard Movement API in github.com/weaviate/weaviate
Affected products
- Go github.com/weaviate/weaviate
Junglewise Threat Intelligence
CVE-2025-67819: GO-2025-4238 - Weaviate OSS has path traversal vulnerability via the Shard Movement API in github.com/weaviate/weaviate
CVE-2025-67819 · Severity: medium · CVSS 4 · Published 2025-12-15
Technologies: github.com/weaviate/weaviate (Go). Vendors: Go.
Related threats
- Weaviate authorization bypass via duplicate Static API Keys
- GO-2025-4237 - Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip in github.com/weaviate/weaviate
- GO-2023-2017 - Denial of service vulnerability in github.com/weaviate/weaviate
- Duplicate Advisory: weaviate denial of service vulnerability