CVE-2025-64725

Critical

Published: 15/12/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

Weblate before version 5.15 allows accepting an invitation opened by a different user. Version 5.15 contains a patch.

Risk Assessment

The risk involves unauthorized access to accounts or projects if an invitation is opened by an unintended person, potentially leading to data confidentiality breaches.

Recommendation

Upgrade Weblate to version 5.15 or later. As a workaround, do not leave invitation sessions unattended.

Original NVD description (English source)

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to accept an invitation opened by a different user. Version 5.15. contains a patch. As a workaround, avoid leaving one's Weblate sessions with an invitation opened unattended.