CVE-2026-30859 WeKnora: Broken Access Control - Cross-Tenant Data Exposure
Authenticated users can access other tenants' sensitive data due to missing tenant isolation checks in the database query tool.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-30859?
CVE-2026-30859 is a medium-severity missing authorization vulnerability in Tencent WeKnora, published on 7 Mar 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (models, messages, embeddings), enabling unauthorized cross-tenant data access with user-level authentication privileges. This issue has been patched in version 0.2.12.
Weakness: CWE-284
Which versions are affected by CVE-2026-30859?
3 open source packages ship an affected version, including github.com/Tencent/WeKnora. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/Tencent/WeKnora Go | All versions | None |
github.com/Tencent/WeKnora Go | All versions | 0.2.12 |
github.com/Tencent/WeKnora Go | All versions | 0.2.12 |
Products include Tencent Weknora.
How do I fix CVE-2026-30859?
Upgrade github.com/Tencent/WeKnora to 0.2.12 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2026-30859 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-30859 exists.
Other vulnerabilities in Tencent WeKnora
- CVE-2026-30860 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool
- CVE-2026-30861 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation
- CVE-2026-22688 WeKnora has Command Injection in MCP stdio test
- CVE-2026-30855 WeKnora: Broken Access Control in Tenant Management
- CVE-2025-11046 Tencent WeKnora test testEmbeddingModel server-side request forgery
Sources
Also known as GHSA-2f4c-vrjq-rcgv, GO-2026-4637.