Critical · published December 19, 2025
🔥 A remote attacker can mess with your Git configurations without breaking a sweat! Think of this vulnerability as a chef changing the restaurant's secret recipe from a distance—if they can manipulate the ingredients, the dish can end up tasting completely different, and potentially disastrous! With this exploit, an attacker could overwrite critical Git settings, leading to unexpected behavior and potentially placing your entire code repository at risk. Imagine the chaos if your deployment suddenly pointed to a rogue server!
Think of this vulnerability as a chef changing the restaurant's secret recipe from a distance—if they can manipulate the ingredients, the dish can end up tasting completely different, and potentially disastrous! This vulnerability in Weblate allows remote attackers to overwrite Git configuration files, impacting how Git operates and possibly redirecting sensitive operations or data.
With this exploit, an attacker could overwrite critical Git settings, leading to unexpected behavior and potentially placing your entire code repository at risk. Imagine the chaos if your deployment suddenly pointed to a rogue server! To secure your system, upgrade Weblate to version 5.15.1 immediately. After that, review your Git configurations to ensure there are no unauthorized changes lurking amongst them! You've got this! Just follow these steps and keep your Git environment safe! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| weblate/weblate | < 5.15.1 | 5.15.1 |