An authenticated user with project.add permission in Weblate versions prior to 5.17.1 can import a crafted project backup ZIP containing components with malicious repository URLs. These URLs can point to private network addresses or use disallowed schemes, bypassing the validate_repo_url check due to the use of bulk_create, and are written directly into the .git/config file. This vulnerability is fixed in version 5.17.1.