https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T10:07:54.960363+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-274989 EUVD-2026-274989 2026-10-06T10:07:55.013094+00:00 EUVD-2026-274989 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30859 fkie_cve-2026-30859 2026-10-06T10:07:55.013134+00:00

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (models, messages, embeddings), enabling unauthorized cross-tenant data access with user-level authentication privileges. This issue has been patched in version 0.2.12.

 https://cve.radiocsirt.org/vuln/ghsa-2f4c-vrjq-rcgv GHSA-2f4c-vrjq-rcgv — WeKnora has Broken Access Control - Cross-Tenant Data Exposure 2026-10-06T10:07:55.013169+00:00

Affected: Go: github.com/Tencent/WeKnora

## Summary A broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (`models`, `messages`, `embeddings`), enabling unauthorized cross-tenant data access with user-level authentication privileges.

---

## Details

### Root Cause The vulnerability exists due to a mismatch between the queryable tables and the tables protected by tenant isolation in `internal/utils/inject.go`.

**Tenant-isolated tables** (protected by automatic `WHERE tenant_id = X` clause): ``` tenants, knowledge_bases, knowledges, sessions, chunks ```

**Queryable tables** (allowed by `WithAllowedTables()` in `WithSecurityDefaults()`): ``` tenants, knowledge_bases, knowledges, sessions, messages, chunks, embeddings, models ```

**Gap**: The tables `messages`, `embeddings`, and `models` are queryable but NOT in the tenant isolation list. This means queries against these tables do NOT receive the automatic `WHERE tenant_id = X` filtering.

### Vulnerable Code

**File: `internal/utils/inject.go`**

```go func WithTenantIsolation(tenantID uint64, tables ...string) SQLValidationOption { return func(v *sqlValidator) { v.enableTenantInjection = true v.tenantID = tenantID v.tablesWithTenantID = make(map[string]bool) if len(tables) == 0 { // Default tables with tenant_id - MISSING: mess…