CVE-2026-118376— WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses

Quick assessment

Affected

Tencent WeKnora

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

WeKnora 0.8.2 之前的版本存在服务器端请求伪造（SSRF）漏洞，该漏洞源于函数错误地将带有 NAT64 前缀的 IPv6 地址识别为公网地址。已认证的攻击者可通过或基于 URL 的知识导入功能，提供解析为内部地址 NAT64 编码的 URL，从而访问内部服务或云元数据端点。

CVSS 5.3 · Medium Updated Oct 28, 2026

Possible ATT&CK Techniques 2 AI

T1078 · Valid Accounts T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses

Source: CVE Program / CVE List V5

Vulnerability Description

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via web_fetch or URL-based knowledge import to reach internal services or cloud metadata endpoints.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Source: CVE Program / CVE List V5

Vulnerability Type

服务端请求伪造(SSRF)

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Tencent	WeKnora	0.2.11 ~ 0.8.2	-

II. Public POCs for CVE-2026-118376

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-118376

请登录查看更多情报信息。

Vendor Pages for CVE-2026-118376 (1)

🔗 Release v0.8.2 · Tencent/WeKnora · GitHub release-notes

Other References for CVE-2026-118376 (4)

https://github.com/Tencent/WeKnora/issues/4092 issue-tracking
https://github.com/Tencent/WeKnora/commit/ff818b681f10bc29edbc48fe35f00009dc276bfa patch
https://github.com/Tencent/WeKnora/blob/3d5d8bfcdfeeea266b292b71cea616847af28d0f/internal/utils/security.go#L267-L327 technical-description
https://www.vulncheck.com/advisories/weknora-before-0.8.2-ssrf-guard-bypass-via-nat64-ipv6-addresses third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-118376

IV. Related Vulnerabilities

Same product: WeKnora

Same vendor: Tencent

Same weakness: CWE-918