PT-2026-2242 · Weknora · Weknora
Im-Soohyun
·
Published
2026-01-09
·
Updated
2026-03-07
·
CVE-2026-22688
CVSS v3.1
9.9
Critical
| Vector | AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
WeKnora versions prior to 0.2.5
Description
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, a command injection vulnerability exists that allows authenticated users to inject values into MCP stdio settings, specifically through
stdio config.command/args. This allows the server to execute arbitrary subprocesses using these injected values. The vulnerability stems from missing security filtering on the stdio config.command/args parameters, a trust boundary violation where configuration data is directly used in execution flows without validation, and a lack of authorization controls. The vulnerable API endpoint is /api/v1/mcp-services/{id}/test. A proof of concept demonstrates the ability to execute commands, such as 'id' and 'uname -a', on the server by creating a file /tmp/RCE ok.txt. Successful exploitation could lead to remote code execution, information disclosure, and potentially privilege escalation or lateral movement depending on the environment.Recommendations
Update WeKnora to version 0.2.5 or later.
Exploit
Fix
RCE
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Weknora