CVE-2026-30858: fallo de gravedad media en Tencent WeKnora
WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.5epss 0.4%
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a DNS rebinding vulnerability in the web_fetch tool allows an unauthenticated attacker to bypass URL validation and access internal resources on the server, including private IP addresses (e.g., 127.0.0.1, 192.168.x.x). By crafting a malicious domain that resolves to a public IP during validation and subsequently resolves to a private IP during execution, an attacker can access sensitive local services and potentially exfiltrate data. This issue has been patched in version 0.3.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Tencent · WeKnoraCVEs relacionadas — Tencent WeKnora
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-30861CRITICALWeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration ValidationEPSS 2.4%CVE-2026-22688CRITICALWeKnora has Command Injection in MCP stdio testEPSS 1.9%CVE-2026-30860CRITICALWeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query ToolEPSS 0.7%CVE-2025-11046MEDIUMTencent WeKnora test testEmbeddingModel server-side request forgeryEPSS 0.5%CVE-2026-91750HIGHWeKnora before 0.7.0 SSRF via Unvalidated HTTP RedirectsEPSS 0.4%CVE-2026-30247MEDIUMWeKnora: SSRF via RedirectionEPSS 0.4%