Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2025-68279

Weblate has an arbitrary file read via symbolic links

Description

Weblate is a web based localization tool. In versions prior to 5.15.1, it was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Version 5.15.1 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WeblateOrg weblate

  • < 5.15.1affected

References