RCE in Tencent Weknora
CVE-2026-30861
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an unauthenticated remote code execution (RCE) vulnerability exists in the MCP stdio configuration validation. The application allows unrestricted user registration, meaning any attacker can create an account and exploit the command injection flaw. Despite implementing a whitelist for allowed commands (npx, uvx) and blacklists for dangerous arguments and environment variables, the validation can be bypassed using the -p flag with npx node. This allows any attacker to execute arbitrary commands with the application's privileges, leading to complete system compromise. This issue has been patched in version 0.2.10.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.021 (80.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Tencent Weknora — versions >= 0.2.5, < 0.2.10
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM, Exploit, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-30861?
- CVE-2026-30861 is a critical-severity vulnerability in Tencent Weknora, classified under OS Command Injection. CVSS score: 9.9/10. Published 2026-03-07.
- How severe is CVE-2026-30861?
- Critical severity. CVSS v3 base score is 9.9 out of 10.