Advisoriesby Ibis
WeKnora security advisories
10 advisories · 6 critical or high in 12 months · latest Mar 7
10 advisories
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration ValidationCVE-2026-30861fixed in 0.2.10WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query ToolCVE-2026-30860fixed in 0.2.12WeKnora has Broken Access Control - Cross-Tenant Data ExposureCVE-2026-30859fixed in 0.2.12WeKnora has DNS Rebinding Vulnerability in web_fetch Tool that Allows SSRF to Internal ResourcesCVE-2026-30858fixed in 0.3.0WeKnora has Unauthorized Cross‑Tenant Knowledge Base CloningCVE-2026-30857fixed in 0.3.0WeKnora: attacker could redirect LLM execution flowCVE-2026-30856fixed in 0.3.0WeKnora Vulnerable to Broken Access Control in Tenant ManagementCVE-2026-30855fixed in 0.3.2WeKnora is Vulnerable to SSRF via RedirectionCVE-2026-30247fixed in 0.2.12WeKnora has Command Injection in MCP stdio testCVE-2026-22688fixed in 0.2.5WeKnora vulnerable to SQL InjectionCVE-2026-22687fixed in 0.2.5About WeKnora
Open-source LLM knowledge platform: turn raw documents into a queryable RAG, an autonomous reasoning agent, and a self-maintaining Wiki.
Packages watched: github.com/Tencent/WeKnora (Go).