Weblate versions from 4.11.1 up to but not including 2026.8 contain an OS command injection vulnerability in the Mercurial backend. This flaw allows an authenticated user with project-scoped component.edit permission to exploit repository filenames starting with a dash (-) as Mercurial options, potentially leading to arbitrary command execution with the Weblate service account privileges. This vulnerability is a residual issue from an incomplete fix for CVE-2022-23915 and has been addressed in version 2026.8.
CVE-2026-41654 is a medium severity vulnerability in Weblate versions prior to 5.17.1. It allows an authenticated user with project.add permission to import a crafted project backup ZIP containing a component JSON with a malicious repository URL. This URL can point to private network addresses or use disallowed schemes, bypassing input validation due to the use of bulk_create which skips Django's full_clean validation. The malicious URL is then written directly into the . git/config file. This issue has been fixed in Weblate version 5.17.
Weblate versions prior to 5.17.1 contain a cross-site scripting (XSS) vulnerability in the Markdown renderer used for user comments and other user-provided content. This vulnerability arises because some attributes are not properly sanitized, allowing an attacker to inject code into the HTML. However, Weblate's strict Content Security Policy (CSP) helps mitigate the risk of exploitation. The issue was identified and fixed in version 5.17.1.
A vulnerability in Weblate versions prior to 5.17.1 allows unauthorized users with limited privileges to enumerate translations in projects they cannot access via the screenshots, tasks, and component link API. This information disclosure flaw has a medium severity rating and has been fixed in version 5.17.1.
Weblate versions prior to 5.17.1 do not revoke Django REST Framework API tokens when a user changes their password. While browser sessions are invalidated correctly, API tokens with the 'wlu_*' prefix remain valid, potentially allowing continued API access after a password change. This issue is fixed in version 5.17.1.
Weblate is a web based localization tool. In versions prior to 5.17, a user with the project.edit permission (granted by the per-project "Administration" role) can configure machine translation service URLs pointing to arbitrary internal network addresses. During configuration validation, Weblate makes an HTTP request to the attacker-controlled URL and reflects up to 200 characters of the response body back to the user in an error message. This constitutes a Server-Side Request Forgery (SSRF) with partial response read. This issue has been fixed in version 5.17. If developers are unable to immediately upgrade, they can limit available machinery services via WEBLATE_MACHINERY setting.
CVE-2026-33220 is a medium severity vulnerability in Weblate versions prior to 5.17 involving improper limitation of a pathname to a restricted directory (path traversal) in the translation memory API. This flaw allowed access to unintended endpoints without proper access control. The issue has been fixed in Weblate version 5.17. Users unable to upgrade immediately can mitigate risk by disabling the translation memory API feature, which is not enabled by default unless the CDN add-on is used.
Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue.
Weblate is a web based localization tool. In versions 5.14 and below, Weblate leaks the IP address of the project member inviting the user to the project in the audit log. The audit log includes IP addresses from admin-triggered actions, which can be viewed by invited users. This issue is fixed in version 5.14.1.