CVE-2026-30861

The WeKnora application implements a validation mechanism for the MCP stdio protocol configuration, which includes a whitelist of allowed commands (npx, uvx) and blacklists of dangerous arguments and environment variables. However, the validation can be bypassed by passing the -p flag in combination with the npx node command, which allows injection and execution of arbitrary system commands. Since the application enables unrestricted user account registration, any attacker can create an account and immediately exploit this vulnerability without any additional privileges.

An attacker can execute arbitrary system commands with the privileges of the application process, leading to complete system compromise, including data theft, malware installation, or further lateral movement in the network.

WeKnora should be updated to version 0.2.10 or later, in which the issue has been fixed. Details are available in the official security advisory from the vendor: https://github.com/Tencent/WeKnora/security/advisories/GHSA-r55h-3rwj-hcmg

Tencent WeKnora in versions 0.2.5 to 0.2.9 (inclusive)