Skip to content
OpenAdvisories

Product · Tencent

WeKnora

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-30855

    WeKnora: Broken Access Control in Tenant Management

    WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modify, or delete…

    Tencent WeKnora github.com/Tencent/WeKnora Go
  • High 7.3
    CVE-2025-11046

    Tencent WeKnora test testEmbeddingModel server-side request forgery

    A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embedding/test. The manipulation of the argument baseUrl results in server-side request forgery. The attack can be la…

    Tencent WeKnora