CVE-2026-22687 WeKnora vulnerable to SQL Injection

What is CVE-2026-22687?

CVE-2026-22687 is a medium-severity SQL injection vulnerability in Tencent WeKnora, published on 10 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, after WeKnora enables the Agent service, it allows users to call the database query tool. Due to insufficient backend validation, an attacker can use prompt‑based bypass techniques to evade query restrictions and obtain sensitive information from the target server and database. This issue has been patched in version 0.2.5.

Weakness: CWE-89

Which versions are affected by CVE-2026-22687?

3 open source packages ship an affected version, including github.com/Tencent/WeKnora. It affects 1 product.

Products include Tencent Weknora.

How do I fix CVE-2026-22687?

Upgrade github.com/Tencent/WeKnora to 0.2.5 or later.

Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.

Is CVE-2026-22687 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-22687 exists.

Other vulnerabilities in Tencent WeKnora

• CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool Critical 10.0
• CVE-2026-30861 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation Critical 10.0
• CVE-2026-22688 WeKnora has Command Injection in MCP stdio test Critical 10.0
• CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management High 8.8
• CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery Medium 6.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pcwc-3fw3-8cqv, GO-2026-4293.