CVE-2026-65318 | Weaviate Verba up to 2.1.3 WebSocket Import Endpoint /ws/import_files server-side request forgery

July 22, 2026 Yanac

A vulnerability described as problematic has been identified in Weaviate Verba up to 2.1.3. This issue affects some unknown processing of the file /ws/import_files of the component WebSocket Import Endpoint. The manipulation results in server-side request forgery.

This vulnerability is cataloged as CVE-2026-65318. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More