What’s Vulnerable › Vulnerabilities

CVE-2026-91750: WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-15 · updated 2026-09-23
• Weakness: CWE-918

Description

WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation by supplying a public URL that redirects to internal network addresses, allowing access to internal services and cloud metadata.

Affected products

• Tencent WeKnora: from 0.5.2 before 0.7.0 — fixed in 0.7.0

How to fix

Upgrade to a fixed version: Tencent WeKnora 0.7.0. Check the vendor advisory for mitigations.

References

• https://github.com/Tencent/WeKnora
• https://github.com/Tencent/WeKnora/blob/v0.6.2/internal/application/service/knowledge_util.go#L339-L348
• https://github.com/Tencent/WeKnora/commit/1d322c525a6197d24f07555b4b18ad33313b4328
• https://github.com/Tencent/WeKnora/issues/2511
• https://www.vulncheck.com/advisories/weknora-before-0.7.0-ssrf-via-unvalidated-http-redirects
• https://github.com/Tencent/WeKnora/issues/2511

Get alerted when CVE-2026-91750 or the next vulnerability affects your stack