Vulnerability · Published Mar 7, 2026 · Assigned by GitHub_M
CVE-2026-30860WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
Critical 10.0
In plain English
A critical-severity SQL injection in WeKnora from Tencent. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within PostgreSQL array expressions and row expressions, allowing attackers to bypass SQL injection protections. By smuggling dangerous PostgreSQL functions inside these expressions and chaining them with large object operations and library loading capabilities, an unauthenticated attacker can achieve arbitrary code execution on the database server with database user privileges. This issue has been patched in version 0.2.12.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/Tencent/WeKnora | 0.2.12 | GHSA-8w32-6mrw-q5wv |
| Go | github.com/Tencent/WeKnora | no fix listed | GO-2026-4641 |
Affected products (as reported)
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://github.com/Tencent/WeKnora/security/advisories/GHSA-8w32-6mrw-q5wv x_refsource_CONFIRM