WE
Product
WeKnora
15
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 3High 6Medium 6Low 0
Watch
Add WeKnora to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-30860 | 9.8 | Mar 7 | WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool Affected: < 0.2.12 |
| CVE-2026-22687 | 9.8 | Jan 10 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval Affected: before 0.2.5 |
| CVE-2025-11046 | 9.8 | Sep 26 | A security flaw has been discovered in Tencent WeKnora 0.1.0 Affected: 0.1.0 |
| CVE-2026-30861 | 8.8 | Mar 7 | WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation Affected: >= 0.2.5, < 0.2.10 |
| CVE-2026-30855 | 8.8 | Mar 7 | WeKnora: Broken Access Control in Tenant Management Affected: < 0.3.2 |
| CVE-2026-22688 | 8.8 | Jan 10 | WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval Affected: before 0.2.5 |
| CVE-2026-30856 | 7.6 | Mar 7 | WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection Affected: < 0.3.0 |
| CVE-2026-30858 | 7.5 | Mar 7 | WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources Affected: < 0.3.0 |
| CVE-2026-30247 | 7.5 | Mar 7 | WeKnora: SSRF via Redirection Affected: < 0.2.12 |
| CVE-2026-91750 | 6.5 | Sep 15 | WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects Affected: 0.5.2 before 0.7.0 |
| CVE-2026-30859 | 6.5 | Mar 7 | WeKnora: Broken Access Control - Cross-Tenant Data Exposure Affected: < 0.2.12 |
| CVE-2026-108821 | 6.3 | Oct 12 | Tencent WeKnora SQL Validator inject.go validateSubquery sql injection Affected: 0.8.0; 0.8.1 |
| CVE-2026-8786 | 6.3 | May 18 | Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization Affected: 0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.3.4; 0.3.5; +1 more |
| CVE-2026-118376 New | 5.3 | Oct 28 | WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses Affected: 0.2.11 before 0.8.2 |
| CVE-2026-30857 | 5.3 | Mar 7 | WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning Affected: < 0.3.0 |
Showing 15