# CVE-2026-33435: Weblate remote code execution in backup restoration

Source: https://junglewise.ai/threats/cve-2026-33435-weblate-remote-code-execution-in-backup-restoration  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-15. Updated: 2026-06-08  
License: CC BY 4.0 with a link back

CVE-2026-33435 · Severity: high · CVSS 8 · Published 2026-04-15

Weblate, a web-based translation and localization tool, is vulnerable to remote code execution during the project restoration process. An attacker with high-level privileges (sufficient to create projects) could upload a malicious backup containing specially crafted Git or Mercurial configuration files. If exploited, this allows the attacker to execute arbitrary commands on the server, potentially leading to a full system takeover or data theft.

Technologies: [weblate (PyPI)](https://junglewise.ai/threats/technologies/weblate), [Weblate](https://junglewise.ai/threats/technologies/weblate-weblate). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi), [Weblate](https://junglewise.ai/threats/vendors/weblate).

## Quick answers

**Is CVE-2026-33435 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-33435 being exploited in the wild.

**How severe is CVE-2026-33435?** High severity, with a CVSS score of 8, published 15 April 2026.

**Which products and versions are affected?** weblate (PyPI) < 5.17, ECOSYSTEM:introduced=0,fixed=5.17.

**Is there a fix for CVE-2026-33435?** Yes. weblate (PyPI): upgrade to 5.17 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-33435 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-33435?** Check whether you run weblate (PyPI) or Weblate at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- weblate (PyPI): upgrade to 5.17 or later

  ```sh
  pip install "weblate>=5.17"
  ```


## Technical details

Weblate versions prior to 5.17 are vulnerable to Remote Code Execution (RCE) via the project backup restoration feature. The vulnerability stems from a failure to filter or neutralize dangerous Git and Mercurial configuration files within the backup archive (CWE-94, CWE-434). An attacker with high privileges (PR:H), such as the ability to create or manage projects, can upload a crafted backup file. During the restoration process, these configuration files can be leveraged to execute arbitrary code on the host system. The attack complexity is considered high (AC:H) as it requires specific conditions during restoration, and the scope is changed (S:C) because the exploit impacts the underlying operating system. This issue is addressed in Weblate 5.17.

## Affected products

- WeblateOrg weblate < 5.17

## Identifiers

- CVE-2026-33435
- GHSA-558g-h753-6m33
- PYSEC-2026-154

## Timeline

- 2026-04-15: disclosed
- 2026-04-15: advisory: NVD publication date
- 2026-04-16: patched: GitHub Advisory published and fix confirmed in version 5.17

## References

- [https://api.github.com/users/nijel](https://api.github.com/users/nijel)
- [https://github.com/nijel](https://github.com/nijel)
- [https://api.github.com/users/nijel/gists%7B/gist_id%7D](https://api.github.com/users/nijel/gists%7B/gist_id%7D)
- [https://api.github.com/users/nijel/repos](https://api.github.com/users/nijel/repos)
- [https://avatars.githubusercontent.com/u/212189?v=4](https://avatars.githubusercontent.com/u/212189?v=4)
- [https://api.github.com/users/nijel/events%7B/privacy%7D](https://api.github.com/users/nijel/events%7B/privacy%7D)

## Related threats

- [Weblate argument injection in Mercurial backend](https://junglewise.ai/threats/cve-2026-86035-weblate-is-a-web-based-continuous-localization-platform-used-to)
- [Weblate IDOR in GroupViewSet authorization bypass](https://junglewise.ai/threats/cve-2026-55228-weblate-idor-in-groupviewset-authorization-bypass)
- [Weblate observable object existence disclosure via HTTP status codes](https://junglewise.ai/threats/cve-2026-55227-weblate-observable-object-existence-disclosure-via-http-status)
- [PYSEC-2026-2037 - Weblate leaks information via screenshots](https://junglewise.ai/threats/cve-2026-21889-weblate-information-disclosure-via-unprotected-screenshots)
- [PYSEC-2026-2040 - Weblate has an arbitrary file read via symbolic links](https://junglewise.ai/threats/cve-2025-68279-weblate-has-an-arbitrary-file-read-via-symbolic-links)