What’s Vulnerable › Vulnerabilities

CVE-2026-22687: WeKnora vulnerable to SQL Injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-10 · updated 2026-06-17
• Weakness: CWE-89

Description

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, after WeKnora enables the Agent service, it allows users to call the database query tool. Due to insufficient backend validation, an attacker can use prompt‑based bypass techniques to evade query restrictions and obtain sensitive information from the target server and database. This issue has been patched in version 0.2.5.

Affected products

• Tencent WeKnora: before 0.2.5 — fixed in 0.2.5

How to fix

Upgrade to a fixed version: Tencent WeKnora 0.2.5. Check the vendor advisory for mitigations.

References

• https://github.com/Tencent/WeKnora/commit/da55707022c252dd2c20f8e18145b2d899ee06a1
• https://github.com/Tencent/WeKnora/security/advisories/GHSA-pcwc-3fw3-8cqv
• https://github.com/Tencent/WeKnora/security/advisories/GHSA-pcwc-3fw3-8cqv

Get alerted when CVE-2026-22687 or the next vulnerability affects your stack