CVE-2026-34393

Published: Apr 15, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: security-advisories@github.com (Secondary)

Description

Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17.

Affected (1)

Products: Weblate: Weblate

Weblate

1 product

Weblate

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Weblate Weblate	Before 5.17

Related CWEs

CWE-269

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://github.com/WeblateOrg/weblate/pull/18687

Source: security-advisories@github.com

Issue TrackingPatch

https://github.com/WeblateOrg/weblate/security/advisories/GHSA-3382-gw9x-477v

Source: security-advisories@github.com

Third Party Advisory

Timeline

No history available yet.