Skip to content
CVE PROGRAM SOURCE RECORD2.3 Low

CVE-2026-21889

Weblate leaks information via screenshots

Description

Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

WeblateOrg weblate

  • < 5.15.2affected

References