5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-34244

CVE-2026-34244: Weblate: SSRF via Project-Level Machinery Configuration

Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit permission (granted by the per-project "Administration" role) can configure machine translation service URLs pointing to arbitrary internal network addresses. During configuration validation, Weblate makes an HTTP request to the attacker-controlled URL and reflects up to 200 characters of the response body back to the user in an error message. This constitutes a Server-Side Request Forgery (SSRF) with partial response read. This issue has been fixed in version 5.17. If developers are unable to immediately upgrade, they can limit available machinery services via WEBLATE_MACHINERY setting.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-34244

CVE-2026-34244:

5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
weblate	pip	< 5.17	5.17

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a Server-Side Request Forgery (SSRF) in Weblate's machine translation service configuration. A user with 'project.edit' permissions could configure a machine translation service to use a URL pointing to an internal network address. The application failed to validate whether the URL was targeting a public address.

The exploitation flow starts when a user submits a malicious URL through the ProjectMachinerySettings.machinery_settings API endpoint. The configuration is then validated by the BaseMachineryForm.clean method, which, prior to the patch, did not perform any checks to prevent SSRF. During validation, the application makes a request to the configured URL. If this request fails (e.g., due to an invalid protocol for an internal service), the BaseMachineTranslation.check_failure function would be invoked. This function would then leak up to 200 characters of the response from the internal service in the error message displayed to the user, confirming the SSRF and potentially exposing sensitive information.

The patch addresses this by introducing several layers of protection. It adds a new setting ALLOWED_MACHINERY_DOMAINS to allowlist trusted domains. The validation logic in weblate.utils.outbound now checks if a URL points to a public IP address. The ProjectMachinerySettings.machinery_settings endpoint now explicitly disallows private targets. Finally, the BaseMachineTranslation.check_failure method was updated to only include error details from trusted hosts, preventing the information leak.

Vulnerable functions

ProjectMachinerySettings.machinery_settings

weblate/api/views.py

This API endpoint is used to configure machine translation services for a project. The vulnerability lies in the fact that it did not restrict the target URLs for these services. The patch introduces the `allow_private_targets=False` parameter when calling `validate_service_configuration`, which prevents the use of internal network addresses.

BaseMachineryForm.clean

weblate/machinery/forms.py

This function is responsible for validating the machine translation settings provided by the user. Before the patch, it lacked validation to check if the configured URL points to a private or non-public network address. The patch adds the `validate_endpoint_fields` call, which performs the necessary validation to prevent SSRF.

BaseMachineTranslation.check_failure

weblate/machinery/base.py

This function is called when an HTTP request to a machine translation service fails. The vulnerable version of this function would take the raw response text (`response.text`) and include up to 200 characters of it in the error message returned to the user. This allowed an attacker to read parts of the response from the internal service targeted by the SSRF.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.