CVE-2026-27457 | weblate up to 5.16.0 REST API weblate/api/views.py get_queryset authorization (GHSA-wppc-7cq7-cgfv)

A vulnerability classified as problematic has been found in weblate up to 5.16.0. This impacts the function get_queryset of the file weblate/api/views.py of the component REST API. The manipulation leads to missing authorization.

This vulnerability is uniquely identified as CVE-2026-27457. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.