CVE-2026-22688: critical vulnerability in Tencent WeKnora
WeKnora has Command Injection in MCP stdio test
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 1.9%
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings, causing the server to execute subprocesses using these injected values. This issue has been patched in version 0.2.5.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected products
Tencent · WeKnoraRelated CVEs — Tencent WeKnora
In the same product, most dangerous first.
CVE-2026-30861CRITICALWeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration ValidationEPSS 2.4%CVE-2026-30860CRITICALWeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query ToolEPSS 0.7%CVE-2025-11046MEDIUMTencent WeKnora test testEmbeddingModel server-side request forgeryEPSS 0.5%CVE-2026-91750HIGHWeKnora before 0.7.0 SSRF via Unvalidated HTTP RedirectsEPSS 0.4%CVE-2026-30247MEDIUMWeKnora: SSRF via RedirectionEPSS 0.4%CVE-2026-30858MEDIUMWeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal ResourcesEPSS 0.4%