An authenticated path traversal vulnerability in Weaviate OSS allows an attacker to manipulate files on the host system during backup restoration, posing a significant risk to system integrity.

This is a path traversal vulnerability where an attacker with the ability to insert data into the database can supply malicious entry names containing absolute paths or parent directory sequences. This flaw allows the attacker to escape the intended restore root directory and perform unauthorized file operations within the application's privilege scope.

Successful exploitation allows an attacker to overwrite critical system or application files, which could lead to unauthorized code execution, configuration tampering, or a complete denial of service. With a CVSS score of 7.2, this vulnerability represents a high-severity risk to business continuity and data security for organizations relying on Weaviate for critical data storage.

Immediate Action: Upgrade Weaviate OSS to version 1.33.4 or the latest available maintenance release (e.g., 1.30.20, 1.31.19, or 1.32.16) to remediate this vulnerability.

Proactive Monitoring: Review database backup logs and ingestion activity for suspicious entry names that include path traversal characters like ../ or absolute file paths.

Compensating Controls: Restrict the ability to insert data or trigger backup restorations to trusted, highly privileged administrative accounts only.

Public Exploit Available: Unknown

Given the potential for arbitrary file write operations, this vulnerability should be prioritized for remediation in all production environments. Administrators must verify their current Weaviate version and apply the appropriate patch immediately to prevent potential system compromise via malicious backup files.