CVE-2026-21889 — Weblate leaks information via screenshots
Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unaut…
Published: 2026-01-14 · CVSS: 2.3 · CVSS 4.0
Weblate is a web based localization tool. Prior to 5.15.2, the screenshot images were served directly by the HTTP server without proper access control. This could allow an unauthenticated user to access screenshots after guessing their filename. This vulnerability is fixed in 5.15.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7