N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-67818

CVE-2025-67818: Weaviate OSS has a Path Traversal Vulnerability via Backup ZipSlip

An issue was discovered in Weaviate OSS before 1.33.4. An attacker with access to insert data into the database can craft an entry name with an absolute path (e.g., /etc/...) or use parent directory traversal (../../..) to escape the restore root when a backup is restored, potentially creating or overwriting files in arbitrary locations within the application's privilege scope.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-67818

CVE-2025-67818:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/weaviate/weaviate	go	< 1.30.20	1.30.20
github.com/weaviate/weaviate	go	>= 1.31.0-rc.0, < 1.31.19	1.31.19
github.com/weaviate/weaviate	go	>= 1.32.0-rc.0, < 1.32.16	1.32.16
github.com/weaviate/weaviate	go	>= 1.33.0-rc.0, < 1.33.4	1.33.4

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a classic path traversal (CWE-22), also known as ZipSlip, within Weaviate's backup and restore functionality. The root cause is the failure to sanitize file paths provided within a backup archive or through file access APIs. An attacker with the ability to create or restore a backup could craft malicious file paths containing '..' sequences or absolute paths.

The analysis of the provided patches pinpoints the exact locations where this sanitization was missing. In commit 89c2270869e6d64f5b5276b8626c11cd816c6665, the backup.unzip.ReadChunk function is fixed. It previously used filepath.Join with a path from the backup archive header (header.Name) without validation. The patch introduces a call to diskio.SanitizeFilePathJoin to prevent directory traversal.

In commit 169df2dc92bc232df62e8fab0a20db2e5371f7aa, the db.Shard.GetFile and db.Shard.GetFileMetadata functions are patched. These functions also constructed file paths using an untrusted relativeFilePath argument. The fix was to add and use a new sanitizeFilePath method on the shard object, which ensures the requested path is confined within the shard's root directory.

During exploitation, a runtime profile would show calls to backup.unzip.ReadChunk when a malicious backup is being restored. Depending on the attack vector, calls to db.Shard.GetFile or db.Shard.GetFileMetadata could also appear in the stack trace if an attacker can control the file path argument passed to these functions during a file retrieval operation related to the backup process.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.