Tencent security advisories

10 advisories across WeKnora

Company profile

Date	Advisory	Severity	Fixed in
Mar 7	WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation Critical10.0Mar 7 CVE-2026-308610.2.10	Critical10.0	0.2.10
Mar 6	WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool Critical10.0Mar 6 CVE-2026-308600.2.12	Critical10.0	0.2.12
Mar 6	WeKnora has Broken Access Control - Cross-Tenant Data Exposure High7.5Mar 6 CVE-2026-308590.2.12	High7.5	0.2.12
Mar 6	WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal Resources High7.5Mar 6 CVE-2026-308580.3.0	High7.5	0.3.0
Mar 6	WeKnora has Unauthorized Cross‑Tenant Knowledge Base Cloning Medium5.9Mar 6 CVE-2026-308570.3.0	Medium5.9	0.3.0
Mar 6	WeKnora: attacker could redirect LLM execution flow Medium5.4Mar 6 CVE-2026-308560.3.0	Medium5.4	0.3.0
Mar 6	WeKnora Vulnerable to Broken Access Control in Tenant Management Critical9.8Mar 6 CVE-2026-308550.3.2	Critical9.8	0.3.2
Mar 5	WeKnora is Vulnerable to SSRF via Redirection Medium5.9Mar 5 CVE-2026-302470.2.12	Medium5.9	0.2.12
Jan 9	WeKnora has Command Injection in MCP stdio test Critical9.9Jan 9 CVE-2026-226880.2.5	Critical9.9	0.2.5
Jan 9	WeKnora vulnerable to SQL Injection Medium5.6Jan 9 CVE-2026-226870.2.5	Medium5.6	0.2.5

About Tencent

Elsewhere on fru.dev: Repos · Trending

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.