CVE-2026-22687
Medium · 5.6CVSS
5.6
EPSS
0.4%
Published
Jan 10, 2026
CISA due date
—
The record
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, after WeKnora enables the Agent service, it allows users to call the database query tool. Due to insufficient backend validation, an attacker can use prompt‑based bypass techniques to evade query restrictions and obtain sensitive information from the target server and database. This issue has been patched in version 0.2.5.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/Tencent/WeKnora | 0 | 0.2.5 |
| openSUSE:Leap 15.6 | govulncheck-vulndb | 0 | 0.0.20260114T191543-150000.1.137.1 |
Related vulnerabilities
- GO-2026-4293 WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Same vulnerability
- GO-2026-4292 WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora Also affects github.com/Tencent/WeKnora
- CVE-2026-22688 WeKnora is an LLM-powered framework designed for deep document understanding and semantic… Also affects github.com/Tencent/WeKnora
- CVE-2026-33990 Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using… Also affects govulncheck-vulndb
- CVE-2026-34204 MinIO is a high-performance object storage system. Also affects govulncheck-vulndb
- CVE-2026-34041 act is a project which allows for local running of github actions. Also affects govulncheck-vulndb
- CVE-2026-34042 act is a project which allows for local running of github actions. Also affects govulncheck-vulndb
- CVE-2026-34040 Moby is an open source container framework. Also affects govulncheck-vulndb