{"id":"EUVD-2025-203093","enisaUuid":"44f9b78b-05f4-33a0-b2e8-44c1a867a49b","description":"An issue was discovered in Weaviate OSS before 1.33.4. Due to a lack of validation of the fileName field in the transfer logic, an attacker who can call the GetFile method while a shard is in the \"Pause file activity\" state and the FileReplicationService is reachable can read arbitrary files accessible to the service process.","datePublished":"Dec 12, 2025, 12:00:00 AM","dateUpdated":"Dec 12, 2025, 7:14:30 PM","baseScore":4.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/weaviate/weaviate\nhttps://weaviate.io/blog/weaviate-security-release-november-2025\n","aliases":"CVE-2025-67819\nGHSA-hmmh-292h-3364\n","assigner":"mitre","epss":0.5,"enisaIdProduct":[{"id":"9dcf3142-4951-3dd1-9d5f-fefc9979802f","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"enisaIdVendor":[{"id":"ac44f25a-41c3-378d-a1cb-b17b02f45d0f","vendor":{"name":"n/a"}}],"enisaIdVulnerability":[{"id":"8b2c6461-5186-3e02-94d6-ef79a61cdaff","vulnerability":{"id":"GHSA-hmmh-292h-3364","description":"Weaviate OSS has path traversal vulnerability via the Shard Movement API","datePublished":"Dec 12, 2025, 6:30:35 PM","dateUpdated":"Dec 18, 2025, 1:07:29 AM","baseScore":0.0,"references":"https://nvd.nist.gov/vuln/detail/CVE-2025-67819\nhttps://github.com/weaviate/weaviate/commit/4ff2cc89277c264c37d0f7316d9eb6368cfc30ff\nhttps://github.com/weaviate/weaviate/commit/89c2270869e6d64f5b5276b8626c11cd816c6665\nhttps://github.com/weaviate/weaviate/commit/b18cc7ea82d80a61e7943361a6e335e3fd5a49c7\nhttps://github.com/advisories/GHSA-hmmh-292h-3364\nhttps://github.com/weaviate/weaviate\nhttps://weaviate.io/blog/weaviate-security-release-november-2025\n","enisa_id":"EUVD-2025-203093\n","aliases":"CVE-2025-67819\nGHSA-hmmh-292h-3364\n","epss":0.0,"dataProcessed":"Nov 8, 2026, 1:54:33 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"ef6f3055-0cbf-394d-a98e-867c2281f924","vulnerability":{"id":"CVE-2025-67819","description":"An issue was discovered in Weaviate OSS before 1.33.4. Due to a lack of validation of the fileName field in the transfer logic, an attacker who can call the GetFile method while a shard is in the \"Pause file activity\" state and the FileReplicationService is reachable can read arbitrary files accessible to the service process.","datePublished":"Dec 12, 2025, 12:00:00 AM","dateUpdated":"Dec 12, 2025, 7:14:30 PM","status":"PUBLISHED","baseScore":4.9,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","references":"https://github.com/weaviate/weaviate\nhttps://weaviate.io/blog/weaviate-security-release-november-2025\n","enisa_id":"EUVD-2025-203093\n","assigner":"mitre","epss":0.5,"dataProcessed":"Nov 9, 2026, 7:20:04 AM","vulnerabilityProduct":[{"id":"a46df6e5-c7c5-3d33-a54a-307edc9bb196","product":{"name":"n/a","vendor":{"name":"n/a"}},"product_version":"n/a"}],"vulnerabilityVendor":[{"id":"6424fe83-b9c3-3cd5-be98-7ebadde0b5e2","vendor":{"name":"n/a"}}]}}],"enisaIdAdvisory":[]}