Tencent WeKnora vulnerabilities

CVEs per yearBy the year they were published

1. 20251
2. 202614

Newest CVEs

• CVE-2026-118376

  WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses

  Tencent · WeKnora

  Medium6.0
• CVE-2026-108821

  Tencent WeKnora SQL Validator inject.go validateSubquery sql injection

  Tencent · WeKnora

  Medium5.3
• CVE-2026-91750

  WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects

  Tencent · WeKnora

  High7.1
• CVE-2026-8786

  Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization

  Tencent · WeKnora

  Medium5.3
• CVE-2026-30861

  WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation

  Tencent · WeKnora

  Critical10.0
• CVE-2026-30860

  WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

  Tencent · WeKnora

  Critical10.0
• CVE-2026-30859

  WeKnora: Broken Access Control - Cross-Tenant Data Exposure

  Tencent · WeKnora

  Medium5.3
• CVE-2026-30858

  WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources

  Tencent · WeKnora

  Medium6.5
• CVE-2026-30857

  WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning

  Tencent · WeKnora

  Medium5.3
• CVE-2026-30856

  WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection

  Tencent · WeKnora

  Medium5.9