GO-2026-4292
NoneCVSS
—
EPSS
—
Published
Jan 12, 2026
CISA due date
—
The record
WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/Tencent/WeKnora | 0 | 0.2.5 |
Related vulnerabilities
- CVE-2026-22688 WeKnora is an LLM-powered framework designed for deep document understanding and semantic… Same vulnerability
- GO-2026-4293 WeKnora vulnerable to SQL Injection in github.com/Tencent/WeKnora Also affects github.com/Tencent/WeKnora
- CVE-2026-22687 WeKnora is an LLM-powered framework designed for deep document understanding and semantic… Also affects github.com/Tencent/WeKnora