CVE-2026-30247 WeKnora: SSRF via Redirection
Attackers can bypass URL validation via HTTP redirects to access internal services in the WeKnora LLM framework.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-30247?
CVE-2026-30247 is a medium-severity server-side request forgery vulnerability in Tencent WeKnora, published on 7 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, the application's "Import document via URL" feature is vulnerable to Server-Side Request Forgery (SSRF) through HTTP redirects. While the backend implements comprehensive URL validation (blocking private IPs, loopback addresses, reserved hostnames, and cloud metadata endpoints), it fails to validate redirect targets. An attacker can bypass all protections by using a redirect chain, forcing the server to access internal services. Additionally, Docker-specific internal addresses like host.docker.internal are not blocked. This issue has been patched in version 0.2.12.
Weakness: CWE-918
Which versions are affected by CVE-2026-30247?
3 open source packages ship an affected version, including github.com/Tencent/WeKnora. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/Tencent/WeKnora Go | All versions | 0.2.12 |
github.com/Tencent/WeKnora Go | All versions | 0.2.12 |
github.com/Tencent/WeKnora Go | All versions | 0.2.12 |
Products include Tencent Weknora.
How do I fix CVE-2026-30247?
Upgrade github.com/Tencent/WeKnora to 0.2.12 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2026-30247 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-30247 exists.
Other vulnerabilities in Tencent WeKnora
- CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
- CVE-2026-30861 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
- CVE-2026-22688 WeKnora has Command Injection in MCP stdio test
- CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management
- CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery
Sources
Also known as GHSA-595m-wc8g-6qgc, GO-2026-4628.