CVE 10 CRITICAL

WeKnora has Command Injection in MCP stdio test_CVE-2026-22688

January 9, 2026 invoker category_cve

10 / 10

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings, causing the server to execute subprocesses using these injected values. This issue has been patched in version 0.2.5.

AI Analysis

Command injection vulnerability in WeKnora framework

Basic Information

ID CVE-2026-22688

Source GitHub_M

Published Jan 10, 2026 at 03:41

Affected Product

Vendor Tencent

Product WeKnora

Version < 0.2.5

Affected Versions Tencent WeKnora < 0.2.5

CWE Classification

CWE-77

AI Assessment

AI Score 10 / 10

AI Severity Critical

Vendor Tencent

Product WeKnora

Version < 0.2.5

References

{
    "lastseen": "",
    "description": "WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdio_config.command/args into MCP stdio settings, causing the server to execute subprocesses using these injected values. This issue has been patched in version 0.2.5.",
    "published": "2026-01-10T03:41:59.952Z",
    "modified": "2026-01-10T03:41:59.952Z",
    "type": "cve",
    "title": "WeKnora has Command\u00a0Injection\u00a0in\u00a0MCP stdio\u00a0test",
    "source": "GitHub_M",
    "references": "https://github.com/Tencent/WeKnora/security/advisories/GHSA-78h3-63c4-5fqc\nhttps://github.com/Tencent/WeKnora/commit/f7900a5e9a18c99d25cec9589ead9e4e59ce04bb",
    "id": "CVE-2026-22688",
    "bulletinFamily": "",
    "cwe": [
        "CWE-77"
    ],
    "cvelist": null,
    "sourceData": "Tencent WeKnora < 0.2.5",
    "sourceHref": "",
    "cvss": {
        "score": 10,
        "severity": "CRITICAL",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "WeKnora",
    "version": "< 0.2.5",
    "vendor": "Tencent",
    "ai_description": "Command injection vulnerability in WeKnora framework",
    "ai_severity": "Critical",
    "ai_vendor": "Tencent",
    "ai_product": "WeKnora",
    "ai_version": "< 0.2.5",
    "ai_score": 10
}

💭 Join the Security Discussion ❌ Cancel Reply