Medium severity · published Oct 28, 2026
CVE-2026-118376
WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses
New
5.3
CVSS
–
EPSS
No
On KEV
Description
WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via web_fetch or URL-based knowledge import to reach internal services or cloud metadata endpoints.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
WeKnora · Tencent
0.2.11 before 0.8.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-118376
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-118376
issue-tracking
https://github.com/Tencent/WeKnora/issues/4092
patch
https://github.com/Tencent/WeKnora/commit/ff818b681f10bc29edbc48fe35f00009dc276bfa
patch
https://github.com/Tencent/WeKnora/commit/d7ccd5ba517cc3968e6d5000a2ab0f4b51ef1dda
technical-description
https://github.com/Tencent/WeKnora/blob/3d5d8bfcdfeeea266b292b71cea616847af28d0f/internal/utils/security.go#L267-L327
release-notes
https://github.com/Tencent/WeKnora/releases/tag/v0.8.2
product
https://github.com/Tencent/WeKnora
More from WeKnora
9.8
CVE-2026-30860
WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
9.8
CVE-2026-22687
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval
9.8
CVE-2025-11046
A security flaw has been discovered in Tencent WeKnora 0.1.0
8.8
CVE-2026-30861
WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
8.8
CVE-2026-30855
WeKnora: Broken Access Control in Tenant Management