Tencent WeKnora vulnerabilities
15 published CVEs name Tencent WeKnora among the affected products.
- 15Published CVEs15 of them scored
- 14Last 12 monthspublished in the last year
- 3Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-118376
WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses
Tencent · WeKnora
Medium6.0 - CVE-2026-108821
Tencent WeKnora SQL Validator inject.go validateSubquery sql injection
Tencent · WeKnora
Medium5.3 - CVE-2026-91750
WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects
Tencent · WeKnora
High7.1 - CVE-2026-8786
Tencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorization
Tencent · WeKnora
Medium5.3 - CVE-2026-30861
WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
Tencent · WeKnora
Critical10.0 - CVE-2026-30860
WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
Tencent · WeKnora
Critical10.0 - CVE-2026-30859
WeKnora: Broken Access Control - Cross-Tenant Data Exposure
Tencent · WeKnora
Medium5.3 - CVE-2026-30858
WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources
Tencent · WeKnora
Medium6.5 - CVE-2026-30857
WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning
Tencent · WeKnora
Medium5.3 - CVE-2026-30856
WeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt Injection
Tencent · WeKnora
Medium5.9