Skip to content
OpenAdvisories

Package · Go

github.com/Tencent/WeKnora

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-30861

    WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation

    WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an unauthenticated remote code execution (RCE) vulnerability exists in the MCP stdio configuration validation. Th…

    Tencent WeKnora github.com/Tencent/WeKnora Go
  • Critical 10.0
    CVE-2026-30860

    WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool

    WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in the application's database query functionality. The validation system fails to …

    Tencent WeKnora github.com/Tencent/WeKnora Go
  • Critical 10.0
    CVE-2026-22688

    WeKnora has Command Injection in MCP stdio test

    WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings…

    Tencent WeKnora github.com/Tencent/WeKnora Go