PYSEC-2026-2317
Vulnerability from pysec - Published: 2026-05-07 15:16 - Updated: 2026-07-13 05:52
VLAI
Details
Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an active billing/trial plan) can import a crafted project backup ZIP whose components/.json contains an attacker-chosen repo URL pointing at a private address (e.g. http://127.0.0.1:9999/) or using a non-allow-listed scheme (e.g. file://, git://). Weblate persists the component via Component.objects.bulk_create([component])[0], which bypasses Django's full_clean() and therefore never runs the validate_repo_url validator. The URL is subsequently written verbatim into .git/config by configure_repo(pull=False). This issue has been patched in version 5.17.1.
Severity
8.1 (High)
Impacted products
| Name | purl | weblate | pkg:pypi/weblate |
|---|
Aliases
{
"affected": [
{
"ecosystem_specific": {},
"package": {
"ecosystem": "PyPI",
"name": "weblate",
"purl": "pkg:pypi/weblate"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.17.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.9",
"2.0",
"2.1",
"2.10",
"2.10.1",
"2.11",
"2.12",
"2.13",
"2.13.1",
"2.14",
"2.14.1",
"2.15",
"2.16",
"2.17",
"2.17.1",
"2.18",
"2.19",
"2.19.1",
"2.2",
"2.20",
"2.3",
"2.4",
"2.5",
"2.6",
"2.7",
"2.8",
"2.9",
"3.0",
"3.0.1",
"3.1",
"3.1.1",
"3.10",
"3.10.1",
"3.10.2",
"3.10.3",
"3.11",
"3.11.1",
"3.11.2",
"3.11.3",
"3.2",
"3.2.1",
"3.2.2",
"3.3",
"3.4",
"3.5",
"3.5.1",
"3.6",
"3.6.1",
"3.7",
"3.7.1",
"3.8",
"3.9",
"3.9.1",
"4.0",
"4.0.1",
"4.0.2",
"4.0.3",
"4.0.4",
"4.1",
"4.1.1",
"4.10",
"4.10.1",
"4.11",
"4.11.1",
"4.11.2",
"4.12",
"4.12.1",
"4.12.2",
"4.13",
"4.13.1",
"4.14",
"4.14.1",
"4.14.2",
"4.15",
"4.15.1",
"4.15.2",
"4.16",
"4.16.1",
"4.16.2",
"4.16.3",
"4.16.4",
"4.17",
"4.18",
"4.18.1",
"4.18.2",
"4.2",
"4.2.1",
"4.2.2",
"4.3",
"4.3.1",
"4.3.2",
"4.4",
"4.4.1",
"4.4.2",
"4.5",
"4.5.1",
"4.5.2",
"4.5.3",
"4.6",
"4.6.1",
"4.6.2",
"4.7",
"4.7.1",
"4.7.2",
"4.8",
"4.8.1",
"4.9",
"4.9.1",
"5.0",
"5.0.1",
"5.0.2",
"5.1",
"5.1.1",
"5.10",
"5.10.1",
"5.10.2",
"5.10.3",
"5.10.4",
"5.11",
"5.11.1",
"5.11.3",
"5.11.4",
"5.12.1",
"5.12.2",
"5.13",
"5.13.1",
"5.13.2",
"5.13.3",
"5.14",
"5.14.1",
"5.14.2",
"5.14.3",
"5.15",
"5.15.1",
"5.15.2",
"5.16",
"5.16.1",
"5.16.2",
"5.17",
"5.2",
"5.2.1",
"5.3",
"5.3.1",
"5.4",
"5.4.1",
"5.4.2",
"5.4.3",
"5.5",
"5.5.2",
"5.5.3",
"5.5.4",
"5.5.5",
"5.6",
"5.6.1",
"5.6.2",
"5.7",
"5.7.1",
"5.7.2",
"5.8.1",
"5.8.2",
"5.8.3",
"5.8.4",
"5.9.1",
"5.9.2"
]
}
],
"aliases": [
"CVE-2026-41654",
"GHSA-cwcx-382v-8m9g"
],
"details": "Weblate is a web based localization tool. Prior to version 5.17.1, an authenticated user with project.add permission (default on hosted Weblate SaaS and for any user holding an active billing/trial plan) can import a crafted project backup ZIP whose components/\u003cname\u003e.json contains an attacker-chosen repo URL pointing at a private address (e.g. http://127.0.0.1:9999/) or using a non-allow-listed scheme (e.g. file://, git://). Weblate persists the component via Component.objects.bulk_create([component])[0], which bypasses Django\u0027s full_clean() and therefore never runs the validate_repo_url validator. The URL is subsequently written verbatim into .git/config by configure_repo(pull=False). This issue has been patched in version 5.17.1.",
"id": "PYSEC-2026-2317",
"modified": "2026-07-13T05:52:34.088366Z",
"published": "2026-05-07T15:16:07.907Z",
"references": [
{
"type": "ADVISORY",
"url": "https://github.com/WeblateOrg/weblate/releases/tag/weblate-5.17.1"
},
{
"type": "FIX",
"url": "https://github.com/WeblateOrg/weblate/commit/e1eff1f517c1ee315d69581910baaabb724e5ef0"
},
{
"type": "FIX",
"url": "https://github.com/WeblateOrg/weblate/commit/e4b67a76d95d5165ecb9937f7485fd79223b7f14"
},
{
"type": "FIX",
"url": "https://github.com/WeblateOrg/weblate/pull/19061"
},
{
"type": "FIX",
"url": "https://github.com/WeblateOrg/weblate/pull/19062"
},
{
"type": "FIX",
"url": "https://github.com/WeblateOrg/weblate/security/advisories/GHSA-cwcx-382v-8m9g"
}
],
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"type": "CVSS_V3"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…