WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in the application's database query functionality. The validation system fails to recursively inspect child nodes within PostgreSQL array expressions and row expressions, allowing attackers to bypass SQL injection protections. By smuggling dangerous PostgreSQL functions inside these expressions and chaining them with large object operations and library loading capabilities, an unauthenticated attacker can achieve arbitrary code execution on the database server with database user privileges. This issue has been patched in version 0.2.12.
The SQL query validation system does not perform recursive inspection of child nodes in PostgreSQL array expressions and row expressions. An attacker can smuggle dangerous PostgreSQL functions inside these expressions, thereby bypassing SQL injection protection mechanisms. By combining these functions with large object operations and library loading capabilities, it is possible to achieve remote code execution (RCE) on the database server.
An unauthenticated attacker can execute arbitrary code on the database server with database user privileges, potentially leading to complete server takeover, data theft, and further lateral movement within the infrastructure.
WeKnora should be updated to version 0.2.12 or later, in which the vulnerability has been patched. Details are available in the vendor's references: https://github.com/Tencent/WeKnora/security/advisories/GHSA-8w32-6mrw-q5wv
Tencent WeKnora in versions prior to 0.2.12
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:HTencent Weknora
APPTencent< 0.2.12
Related vulnerabilities
RCE w WeKnora — command injection w walidacji konfiguracji MCP stdio
Command injection w Tencent WeKnora — wykonanie podprocesów przez MCP stdio
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to ...
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to ...
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to ...