Weaviate records

4 published records for vendor weaviate.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-59093No exploit	Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignmentweaviate · weaviate · CWE-266	High8.7	—	0.7%	Jul 2, 2026
31Monitor	CVE-2023-38976No exploit	An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.weaviate · weaviate · CWE-617 Pre-auth Denial of service	High7.5	—	2.1%	Aug 21, 2023
28Monitor	CVE-2025-67818No exploit	An issue was discovered in Weaviate OSS before 1.33.4.weaviate · weaviate · CWE-22 Path traversal	High7.2	—	0.9%	Dec 12, 2025
19Monitor	CVE-2025-67819No exploit	An issue was discovered in Weaviate OSS before 1.33.4.weaviate · weaviate · CWE-22 Path traversal	Medium4.9	—	0.5%	Dec 12, 2025

CVE-2026-59093
34Monitor
Weaviate < 1.38.0 - Privilege Escalation via Unchecked Permissions in RBAC Role Assignment
HighCVSS 8.7No exploitEPSS 1%
weaviate · weaviateJul 2, 2026
CVE-2023-38976
31Monitor
An issue in weaviate v.1.20.0 allows a remote attacker to cause a denial of service via the handleUnbatchedGraphQLRequest function.
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
weaviate · weaviateAug 21, 2023
CVE-2025-67818
28Monitor
An issue was discovered in Weaviate OSS before 1.33.4.
HighCVSS 7.2No exploitEPSS 1%
- Path traversal
weaviate · weaviateDec 12, 2025
CVE-2025-67819
19Monitor
An issue was discovered in Weaviate OSS before 1.33.4.
MediumCVSS 4.9No exploitEPSS 1%
- Path traversal
weaviate · weaviateDec 12, 2025