📦 Weknora

by Tencent

🔍 What is Weknora?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2026-22688

CRITICAL CVSS 9.9 Jan 10, 2026

CVE-2026-22688 is a command injection vulnerability in WeKnora that allows authenticated users to inject malicious commands into MCP stdio settings, causing the server to execute arbitrary subprocesse...

CVE-2026-22687

MEDIUM CVSS 5.6 Jan 10, 2026

WeKnora versions before 0.2.5 contain a SQL injection vulnerability in the Agent service's database query tool. Attackers can use prompt-based techniques to bypass query restrictions and access sensit...