← Back to all sparks
W

Weaviate

DEVOPS
Velocity5.0

Open-source vector database for AI applications and semantic search

Weaviate patched its whole cloud estate in 17 hours after the eMudhra CA compromise.

vector databasesecurityagent memoryfiltered searchquantization
◆Current state
Weaviate's October has been security-heavy: v1.39.3 fixed a Google-module credential leak and then a nearObject cross-collection vector disclosure. Now it reports rotating certificates across its customer estate and platform within 17 hours of the eMudhra leak. On the product side, 1.40 brings PathSeer adaptive filtered search, and Engram is now a Claude Code plugin for persistent agent memory.
◆Where it's heading
Two threads run in parallel: index and quantization research (HFresh, 4-bit RQ, PathSeer) that lowers memory cost at scale, and an agent-memory layer built on Engram. The security posts suggest Weaviate is preparing to show its operational record to enterprise buyers.
◆Prediction
Expect 1.40 to reach GA with PathSeer, along with further Engram integrations for other coding agents.

◆Recent moves

  1. 3d ago

    Deprecating the GraphQL API: timeline and migration paths

    View source ↗
  2. 7d ago

    How Weaviate responded to the eMudhra certificate compromise

    An incident write-up: Weaviate rotated certificates exposed by the eMudhra CA leak across its cloud in under 17 hours. Customers didn't have to do anything, but after two October CVE fixes it adds to the operational record.

    View source ↗
  3. 14d ago

    v1.39.3 fixes cross-collection vector leak in nearObject

    v1.39.3 closes an authorization gap where the nearObject GraphQL operator could expose vectors across collections. It is the second security release in two weeks, and it lands on the isolation boundary that matters most as Weaviate pitches multi-tenant agent memory through Engram.

    View source ↗
  4. 15d ago

    PathSeer: Adaptive Filtered Vector Search

    Weaviate 1.40 adds PathSeer, an adaptive HNSW filter strategy from a SIGMOD 2026 paper, contributed by the paper's first author. It joins sweeping and ACORN, giving users a third option for search filters that cut out a lot of results.

    View source ↗
  5. 21d ago

    Persistent memory for Claude Code with Weaviate Engram

    Engram becomes a Claude Code plugin that gives the coding agent persistent memory. It's Weaviate's clearest move up the stack into agent infrastructure.

    View source ↗
  6. 28d ago

    Weaviate security release - High severity fix for credential disclosure in the Google modules

    v1.39.3 fixes a high-severity credential disclosure in the Google modules. It's a must-apply patch for anyone using Google integrations.

    View source ↗