Skip to content
Tencent Weknora vulnerabilities
-
tencent weknora
WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses
CVE-2026-118376
6.0 Medium
-
tencent weknora
Tencent WeKnora SQL Validator inject.go validateSubquery sql injection
CVE-2026-108821
5.3 Medium
-
tencent weknora
WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects
CVE-2026-91750
7.1 High
-
tencent weknora
Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization
CVE-2026-8786
5.3 Medium
-
tencent weknora
WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
CVE-2026-30861
Fix available
10.0 Critical
-
tencent weknora
WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
CVE-2026-30860
Fix available
10.0 Critical
-
tencent weknora
WeKnora: Broken Access Control - Cross-Tenant Data Exposure
CVE-2026-30859
Fix available
5.3 Medium
-
tencent weknora
WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources
CVE-2026-30858
Fix available
6.5 Medium
-
tencent weknora
WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning
CVE-2026-30857
Fix available
5.3 Medium
-
tencent weknora
WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection
CVE-2026-30856
Fix available
5.9 Medium
-
tencent weknora
WeKnora: Broken Access Control in Tenant Management
CVE-2026-30855
Fix available
8.8 High
-
tencent weknora
WeKnora: SSRF via Redirection
CVE-2026-30247
Fix available
5.9 Medium
-
tencent weknora
WeKnora has Command Injection in MCP stdio test
CVE-2026-22688
Fix available
10.0 Critical
-
tencent weknora
WeKnora vulnerable to SQL Injection
CVE-2026-22687
Fix available
5.6 Medium
-
tencent weknora
Tencent WeKnora test testEmbeddingModel server-side request forgery
CVE-2025-11046
6.9 Medium