CVE-2026-30856

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a vulnerability involving tool name collision and indirect prompt injection allows a malicious remote MCP server to hijack tool execution. By exploiting an ambiguous naming convention in the MCP client (mcp_{service}_{tool}), an attacker can register a malicious tool that overwrites a legitimate one (e.g., tavily_extract). This enables the attacker to redirect LLM execution flow, exfiltrate system prompts, context, and potentially execute other tools with the user's privileges. This issue has been patched in version 0.3.0.

• CWE-706

• https://github.com/Tencent/WeKnora/security/advisories/GHSA-67q9-58vj-32qxExploit, Vendor Advisory

Published

Mar 7, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30850Parse Server is an open source backend that can be deployed …5.9
• CVE-2026-30851Caddy is an extensible server platform that uses TLS by defa…8.8
• CVE-2026-30852Caddy is an extensible server platform that uses TLS by defa…7.5
• CVE-2026-30853calibre is a cross-platform e-book manager for viewing, conv…8.2
• CVE-2026-30854Parse Server is an open source backend that can be deployed …5.3
• CVE-2026-30855WeKnora is an LLM-powered framework designed for deep docume…8.8
• CVE-2026-30857WeKnora is an LLM-powered framework designed for deep docume…5.3
• CVE-2026-30858WeKnora is an LLM-powered framework designed for deep docume…7.5
• CVE-2026-30859WeKnora is an LLM-powered framework designed for deep docume…6.5
• CVE-2026-3086GStreamer H.266 Codec Parser Out-Of-Bounds Write Remote Code…7.8
• CVE-2026-30860WeKnora is an LLM-powered framework designed for deep docume…9.8
• CVE-2026-30861WeKnora is an LLM-powered framework designed for deep docume…8.8