CVE-2026-30860 - WeKnora - SQL Injection

Overview

WeKnora < 0.2.12 contains a SQL injection caused by insufficient validation of child nodes in PostgreSQL array and row expressions, letting unauthenticated attackers execute arbitrary code on the database server with database user privileges.

Severity & Score

Severity: Critical

CVSS Score: 9.9

EPSS Score: 7.7%(Probability of exploitation in next 30 days)

Impact

Unauthenticated attackers can execute arbitrary code on the database server with database user privileges, risking full database compromise.

Mitigation

Upgrade to version 0.2.12 or later.

References

https://github.com/Tencent/WeKnora/security/advisories/GHSA-8w32-6mrw-q5wv

Social Media Activity(5 posts)

TheHackerWire

@thehackerwire

Mar 8, 2026

🔴 CVE-2026-30860 - Critical (9.9) WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in the application's database query functionality. The validation syst... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30860/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Yazoul Alerts

@Matchbook3469

Mar 8, 2026

🔴 New security advisory: CVE-2026-30860 affects multiple systems. • Impact: Remote code execution or complete system compromise possible • Risk: Attackers can gain full control of affected systems • Mitigation: Patch immediately or isolate affected systems Full breakdown: https://www.yazoul.net/advisory/cve/cve-2026-30860 #Cybersecurity #VulnerabilityManagement #CyberSec

View original post

Offensive Sequence

@offseq

Mar 8, 2026

⚠️ CRITICAL: Tencent WeKnora (<0.2.12) hit by CVE-2026-30860 — SQLi in PostgreSQL array/row parsing enables unauthenticated RCE. Patch to 0.2.12 ASAP. Restrict DB rights and monitor logs. https://radar.offseq.com/threat/cve-2026-30860-cwe-89-improper-neutralization-of-s-90c4d0a6 #OffSeq #SQLInjection #InfoSec

View original post

TheHackerWire

@thehackerwire

Mar 8, 2026

🔴 CVE-2026-30860 - Critical (9.9) WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution (RCE) vulnerability exists in the application's database query functionality. The validation syst... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30860/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Offensive Sequence

@offseq

Mar 8, 2026

⚠️ CRITICAL: Tencent WeKnora (<0.2.12) hit by CVE-2026-30860 — SQLi in PostgreSQL array/row parsing enables unauthenticated RCE. Patch to 0.2.12 ASAP. Restrict DB rights and monitor logs. https://radar.offseq.com/threat/cve-2026-30860-cwe-89-improper-neutralization-of-s-90c4d0a6 #OffSeq #SQLInjection #InfoSec

View original post

CVE-2026-30860 - Vulnerability Analysis

Overview

Severity & Score

Impact

Mitigation

References

Social Media Activity(5 posts)

Related Resources

Details

CWE

CVSS Metrics

EPSS Score