Vulnerability · Published Jan 10, 2026 · Assigned by GitHub_M
CVE-2026-22688WeKnora has Command Injection in MCP stdio test
Critical 10.0
In plain English
A critical-severity command injection in WeKnora from Tencent. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings, causing the server to execute subprocesses using these injected values. This issue has been patched in version 0.2.5.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | github.com/Tencent/WeKnora | 0.2.5 | GHSA-78h3-63c4-5fqc |
| Go | github.com/Tencent/WeKnora | 0.2.5 | GO-2026-4292 |
Affected products (as reported)
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H