An arbitrary file read vulnerability in Weblate allows authenticated users to access sensitive files on the server file system by leveraging malicious symbolic links.

This vulnerability is caused by improper limitation of a pathname to a restricted directory and improper link resolution. An authenticated user can exploit this flaw to read sensitive files from the server file system.

The ability to read arbitrary files from the server exposes sensitive configuration data, credentials, and source code, leading to a significant compromise of confidentiality. Given the CVSS score of 7.7, this vulnerability presents a high risk to the integrity and security of the localization environment. Unauthorized access to these files may facilitate further exploitation and lateral movement within the network.

Immediate Action: Upgrade the Weblate installation to version 5.15.1 or later immediately to incorporate the necessary path validation fixes.

Proactive Monitoring: Review web server access logs for unusual file access patterns or requests containing directory traversal sequences such as dot-dot-slash.

Compensating Controls: Ensure that the Weblate application is running with the principle of least privilege, restricting its ability to access files outside of the designated project directories.

Public Exploit Available: Unknown.

The vulnerability represents a critical risk to data privacy and system security. Organizations utilizing Weblate should prioritize the upgrade to version 5.15.1, as it effectively closes the path traversal mechanism. Failure to patch allows authenticated users to potentially exfiltrate sensitive server-side information, which could lead to a broader system compromise.