Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

WeKnora — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in WeKnora, with AI-generated Chinese analysis, references, and POCs.

Vendor: Tencent

CVE ID Title CVSS Severity Published
CVE-2026-108821 Tencent WeKnora SQL Validator inject.go validateSubquery sql injection CWE-89 6.3 Medium 2026-10-12
CVE-2026-91750 WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects CWE-918 6.5 Medium 2026-09-15
CVE-2026-8786 Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization CWE-639 6.3 Medium 2026-05-18
CVE-2026-30861 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CWE-78 10.0 Critical 2026-03-07
CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CWE-89 10.0 Critical 2026-03-07
CVE-2026-30859 WeKnora: Broken Access Control - Cross-Tenant Data Exposure CWE-284 5.3 Medium 2026-03-07
CVE-2026-30858 WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources CWE-918 6.5 Medium 2026-03-07
CVE-2026-30857 WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning CWE-639 5.3 Medium 2026-03-07
CVE-2026-30856 WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection CWE-706 5.9 Medium 2026-03-07
CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management CWE-284 8.8 High 2026-03-07
CVE-2026-30247 WeKnora: SSRF via Redirection CWE-918 5.9 Medium 2026-03-07
CVE-2026-22688 WeKnora has Command Injection in MCP stdio test CWE-77 10.0 Critical 2026-01-10
CVE-2026-22687 WeKnora vulnerable to SQL Injection CWE-89 5.6 Medium 2026-01-10
CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery CWE-918 7.3 High 2025-09-26

All 14 known CVE vulnerabilities affecting WeKnora with full Chinese analysis, references, and POCs where available.