CVE-2025-67818: Weaviate Directory Traversal Backup Vulnerability
Weaviate OSS
Weaviate OSS before version 1.33.4 contains a path traversal vulnerability during backup restoration. Attackers with data insertion access can overwrite arbitrary files within privilege scope.
disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why
- CVSS
- 8.7
- EPSS
- 0.01 · top 38% · 2026-11-13
- fix status
- Fix status unknown
- first report
- 12 Dec 2025
- last update
- 12 Dec 2025
- CVE ids
Timeline · 1
Sources · 1
Advisories and databases
- 2025-12-12CVE-2025-67818: An issue was discovered in Weaviate OSS before 1.33.4.NVD · nvd.nist.gov/vuln/detail/CVE-2025-67818
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Patch now
- AI role
- Attack on AI
- categories
- Infrastructure vulnerability
- severity
- 2 · Disclosed vulnerability
- fix status
- Fix status unknown
- targets
- Framework / tooling
- owasp llm top 10
- LLM03:2025 Supply Chain
- mitre atlas
- no technique for these categories
- dates
- happened 12 Dec 2025 · first reported 12 Dec 2025
- origin
- NVDVulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
- record
- confidence 0.95 · created 2026-10-18 06:33Z · updated 2026-10-18 06:33Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CVE-2025-67818: Weaviate Directory Traversal Backup Vulnerability https://gcdradar.vercel.app/incidents/cve-2025-67818-weaviate-directory-traversal-backup-vulnerabi · AIR-2025-0036 · closed 2025-12-12 - Lane: Patch now - Severity: 2 (Disclosed vulnerability) - Fix status: Fix status unknown - First reported: 2025-12-12 - AI role: Attack on AI - Products: Weaviate OSS - CVE ids: CVE-2025-67818 - CVSS: 8.7 ## Summary Weaviate OSS before version 1.33.4 contains a path traversal vulnerability during backup restoration. Attackers with data insertion access can overwrite arbitrary files within privilege scope. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-12-12: CVE-2025-67818: An issue was discovered in Weaviate OSS before 1.33.4. (https://nvd.nist.gov/vuln/detail/CVE-2025-67818) ## Sources - 2025-12-12 NVD: CVE-2025-67818: An issue was discovered in Weaviate OSS before 1.33.4. https://nvd.nist.gov/vuln/detail/CVE-2025-67818 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closed8.7Weaviate CVE-2025-67819: Weaviate Arbitrary File Read Vulnerability
Patch now · Disclosed · since 12 Dec 2025 · CVE-2025-67819
AI - closed7.5ComfyUI + custom nodes CVE-2026-22777: ComfyUI-Manager configuration injection vulnerability
Patch now · Disclosed · since 10 Jan 2026 · CVE-2026-22777
AI - closed6.5vLLM CVE-2026-22773: vLLM Denial of Service via Idefics3 Vision Model Payload
Patch now · Disclosed · since 13 Jan 2026 · updated 13 Jan 2026 · CVE-2026-22773
AI - closed9.8llama.cpp Llama.cpp Completion Endpoint Memory Corruption Vulnerability
Patch now · Disclosed · since 8 Jan 2026 · CVE-2026-21869
AI - closed8.8vLLM CVE-2026-56340: vLLM introduces enhanced protection for sparse tensor validation DoS
Patch now · Disclosed · since 8 Jan 2026 · updated 20 Jun 2026 · CVE-2026-56340
AI - closed7.5ComfyUI + custom nodes ComfyUI-Manager Configuration and Critical Data Exposure
Patch now · Disclosed · since 5 Jan 2026 · CVE-2025-67303
AI