Read the docs
TI-2026-23688 Aliases CVE-2026-30859GHSA-2f4c-vrjq-rcgv

WeKnora: Broken Access Control - Cross-Tenant Data Exposure

Priority MEDIUM 62CWE-284Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-284.

Summary

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (models, messages, embeddings), enabling unauthorized cross-tenant data access with user-level authentication privileges. This issue has been patched in version 0.2.12.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00242 15th percentileScored 2026-11-07
Fix Fixed WeKnora (Tencent): 0.2.12github.com/Tencent/WeKnora (Go): 0.2.12

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TencentWeKnorabefore 0.2.120.2.12Patch availableCNA
—github.com/Tencent/WeKnora (Go)before 0.2.120.2.12Patch availableGHSA-2f4c-vrjq-rcgv
  • WeKnora VendorTencent Affected before 0.2.12 Fixed in 0.2.12 Patch available CNA
  • github.com/Tencent/WeKnora (Go) Vendor— Affected before 0.2.12 Fixed in 0.2.12 Patch available GHSA-2f4c-vrjq-rcgv

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:*before 0.2.12VulnerableTencent
  • cpe:2.3:a:tencent:weknora:*:*:*:*:*:*:*:* Versions before 0.2.12 Vulnerable ·Tencent

Remediation

  • Fix · CNA WeKnora (Tencent) Fixed in 0.2.12
  • Fix · GHSA-2f4c-vrjq-rcgv github.com/Tencent/WeKnora (Go) Fixed in 0.2.12 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-30859
  2. 2026-10-03 Alias added: GHSA-2f4c-vrjq-rcgv

References

Advisory 2

Other 1

  • TI-2026-23690 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CVSS 3.1CRITICAL 10.0
  • TI-2026-23689 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CVSS 3.1CRITICAL 10.0
  • TI-2026-18215 WeKnora has Command Injection in MCP stdio test CVSS 3.1CRITICAL 10.0
  • TI-2026-18214 WeKnora vulnerable to SQL Injection CVSS 3.1CRITICAL 9.8
  • TI-2026-23684 WeKnora: Broken Access Control in Tenant Management CVSS 3.1HIGH 8.8
  • TI-2025-10116 Tencent WeKnora test testEmbeddingModel server-side request forgery CVSS 4.0MEDIUM 6.9
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences