2 matches found
CVE-2026-11500
A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the component Static API Key Handler. The manipulation of the argument StaticApiKey leads to authorization bypass. It is...
5CVSS4.4AI score0.00338EPSS
SaveExploits0References12
CVE-2026-11500: Authorization Bypass Through User-Controlled Key
A vulnerability was identified in Weaviate up to 1.37.7. This vulnerability affects the function validateConfig of the file usecases/auth/authentication/apikey/client.go of the component Static API Key Handler. The manipulation of the argument StaticApiKey leads to authorization bypass. It is...
5CVSS4.4AI score0.00338EPSS
SaveExploits0References3
20