What’s Vulnerable › Products

Weaviate Verba vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Weaviate Verba version is affected

Latest Weaviate Verba vulnerabilities

• CVE-2026-105145 — Weaviate Verba generate_stream Endpoint util.py get_environment information disclosure (CVSS 5.3)
• CVE-2026-65318 — Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader (CVSS 8.6)
• CVE-2026-65317 — Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass (CVSS 8.6)