Read the docs
TI-2026-23686 Aliases CVE-2026-30857GHSA-8rf9-c59g-f82f

WeKnora: Unauthorized Cross‑Tenant Knowledge Base Cloning

Priority MEDIUM 57CWE-639Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-639.

Summary

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a cross-tenant authorization bypass in the knowledge base copy endpoint allows any authenticated user to clone (duplicate) another tenant’s knowledge base into their own tenant by knowing/guessing the source knowledge base ID. This enables bulk data exfiltration (document/FAQ content) across tenants. This issue has been patched in version 0.3.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00255 17th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed WeKnora (Tencent): 0.3.0github.com/Tencent/WeKnora (Go): 0.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TencentWeKnorabefore 0.3.00.3.0Patch availableCNA
—github.com/Tencent/WeKnora (Go)before 0.3.00.3.0Patch availableGHSA-8rf9-c59g-f82f
  • WeKnora VendorTencent Affected before 0.3.0 Fixed in 0.3.0 Patch available CNA
  • github.com/Tencent/WeKnora (Go) Vendor— Affected before 0.3.0 Fixed in 0.3.0 Patch available GHSA-8rf9-c59g-f82f

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*before 0.3.0VulnerableTencent
  • cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:* Versions before 0.3.0 Vulnerable ·Tencent

Remediation

  • Fix · CNA WeKnora (Tencent) Fixed in 0.3.0
  • Fix · GHSA-8rf9-c59g-f82f github.com/Tencent/WeKnora (Go) Fixed in 0.3.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-30857
  2. 2026-10-03 Alias added: GHSA-8rf9-c59g-f82f

References

Exploit 1

Advisory 1

Other 1

  • TI-2026-23690 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CVSS 3.1CRITICAL 10.0
  • TI-2026-23689 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CVSS 3.1CRITICAL 10.0
  • TI-2026-18215 WeKnora has Command Injection in MCP stdio test CVSS 3.1CRITICAL 10.0
  • TI-2026-18214 WeKnora vulnerable to SQL Injection CVSS 3.1CRITICAL 9.8
  • TI-2026-23684 WeKnora: Broken Access Control in Tenant Management CVSS 3.1HIGH 8.8
  • TI-2025-10116 Tencent WeKnora test testEmbeddingModel server-side request forgery CVSS 4.0MEDIUM 6.9
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences