github.com/Tencent/WeKnora vulnerabilities (Go)

10 vulnerabilities.

• github.com/Tencent/WeKnora Go WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CVE-2026-30861 Fix available 10.0 CriticalMarch 7, 2026
• github.com/Tencent/WeKnora Go WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CVE-2026-30860 Fix available 10.0 CriticalMarch 6, 2026
• github.com/Tencent/WeKnora Go WeKnora: Broken Access Control - Cross-Tenant Data Exposure CVE-2026-30859 Fix available 5.3 MediumMarch 6, 2026
• github.com/Tencent/WeKnora Go WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources CVE-2026-30858 Fix available 6.5 MediumMarch 6, 2026
• github.com/Tencent/WeKnora Go WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning CVE-2026-30857 Fix available 5.3 MediumMarch 6, 2026
• github.com/Tencent/WeKnora Go WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection CVE-2026-30856 Fix available 5.9 MediumMarch 6, 2026
• github.com/Tencent/WeKnora Go WeKnora: Broken Access Control in Tenant Management CVE-2026-30855 Fix available 8.8 HighMarch 6, 2026
• github.com/Tencent/WeKnora Go WeKnora: SSRF via Redirection CVE-2026-30247 Fix available 5.9 MediumMarch 5, 2026
• github.com/Tencent/WeKnora Go WeKnora has Command Injection in MCP stdio test CVE-2026-22688 Fix available 10.0 CriticalJanuary 9, 2026
• github.com/Tencent/WeKnora Go WeKnora vulnerable to SQL Injection CVE-2026-22687 Fix available 5.6 MediumJanuary 9, 2026