Vulnerability details

CVE-2026-22688

Tencent WeKnora

WeKnora has Command Injection in MCP stdio test

CVSS 3.1

10.0Critical

Official description

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings, causing the server to execute subprocesses using these injected values. This issue has been patched in version 0.2.5.

CVSS scores

Score	Version	Source	Vector
10.0Critical	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Tencent	WeKnora	< 0.2.5	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/Tencent/WeKnora/commit/f7900a5e9a18c99d25cec9589ead9e4e59ce04bb x_refsource_MISC
https://github.com/Tencent/WeKnora/security/advisories/GHSA-78h3-63c4-5fqc x_refsource_CONFIRM

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-01-10
Last updated: 2026-01-12
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

1.93%

Probability of exploitation in 30 days

80.1%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')