| 제목 | weaviate Verba <=2.1.3 Information Disclosure |
|---|
| 설명 | Weaviate Verba (goldenverba) through version 2.1.3 contains an unauthenticated LLM API-key exfiltration vulnerability in the generate WebSocket. A remote attacker can connect to /ws/generate_stream without authentication or an Origin header, send a RAG generator configuration that sets a custom OpenAI-compatible URL and omits the API Key field, and cause the server to read OPENAI_API_KEY from the process environment. Verba then issues an HTTP POST to the attacker-controlled base URL with Authorization: Bearer <environment key>, disclosing the live provider secret. The same get_environment() fallback applies to sibling keys (OPENAI_EMBED_API_KEY, UPSTAGE_API_KEY, UNSTRUCTURED_API_KEY, EMBEDDING_SERVICE_KEY) when the corresponding URL is attacker-controlled. This is distinct from CVE-2026-65317 (/api/connect Origin bypass + Custom Weaviate GET SSRF) and CVE-2026-65318 (/ws/import_files HTMLReader GET SSRF), which do not attach environment secrets to the outbound request. |
|---|
| 원천 | ⚠️ https://gist.github.com/DReazer/63d8096046a058f9c7a533846db5e2ac |
|---|
| 사용자 | Snkn0w (UID 90071) |
|---|
| 제출 | 2026. 08. 25. AM 05:22 (1 월 ago) |
|---|
| 모더레이션 | 2026. 10. 03. PM 07:00 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 413370 [Weaviate Verba 까지 2.1.3 generate_stream Endpoint util.py get_environment 정보 공개] |
|---|
| 포인트들 | 20 |
|---|