https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:14:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274989 EUVD-2026-274989 https://cve.radiocsirt.org/vuln/euvd-2026-274989 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30859 <p>WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (models, messages, embeddings), enabling unauthorized cross-tenant data access with user-level authentication privileges. This issue has been patched in version 0.2.12.</p> <p>WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (models, messages, embeddings), enabling unauthorized cross-tenant data access with user-level authentication privileges. This issue has been patched in version 0.2.12.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-30859 https://cve.radiocsirt.org/vuln/ghsa-2f4c-vrjq-rcgv <p><strong>Affected:</strong> Go: github.com/Tencent/WeKnora</p> <p>## Summary A broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (`models`, `messages`, `embeddings`), enabling unauthorized cross-tenant data access with user-level authentication privileges.</p> <p>---</p> <p>## Details</p> <p>### Root Cause The vulnerability exists due to a mismatch between the queryable tables and the tables protected by tenant isolation in `internal/utils/inject.go`.</p> <p>**Tenant-isolated tables** (protected by automatic `WHERE tenant_id = X` clause): ``` tenants, knowledge_bases, knowledges, sessions, chunks ```</p> <p>**Queryable tables** (allowed by `WithAllowedTables()` in `WithSecurityDefaults()`): ``` tenants, knowledge_bases, knowledges, sessions, messages, chunks, embeddings, models ```</p> <p>**Gap**: The tables `messages`, `embeddings`, and `models` are queryable but NOT in the tenant isolation list. This means queries against these tables do NOT receive the automatic `WHERE tenant_id = X` filtering.</p> <p>### Vulnerable Code</p> <p>**File: `internal/utils/inject.go`**</p> <p>```go func WithTenantIsolation(tenantID uint64, tables ...string) SQLValidationOption { return func(v *sqlValidator) { v.enableTenantInjection = true v.tenantID = tenantID v.tablesWithTenantID = make(map[string]bool) if len(tables) == 0 { // Default tables with tenant_id - MISSING: mess…</p> <p><strong>Affected:</strong> Go: github.com/Tencent/WeKnora</p> <p>## Summary A broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (`models`, `messages`, `embeddings`), enabling unauthorized cross-tenant data access with user-level authentication privileges.</p> <p>---</p> <p>## Details</p> <p>### Root Cause The vulnerability exists due to a mismatch between the queryable tables and the tables protected by tenant isolation in `internal/utils/inject.go`.</p> <p>**Tenant-isolated tables** (protected by automatic `WHERE tenant_id = X` clause): ``` tenants, knowledge_bases, knowledges, sessions, chunks ```</p> <p>**Queryable tables** (allowed by `WithAllowedTables()` in `WithSecurityDefaults()`): ``` tenants, knowledge_bases, knowledges, sessions, messages, chunks, embeddings, models ```</p> <p>**Gap**: The tables `messages`, `embeddings`, and `models` are queryable but NOT in the tenant isolation list. This means queries against these tables do NOT receive the automatic `WHERE tenant_id = X` filtering.</p> <p>### Vulnerable Code</p> <p>**File: `internal/utils/inject.go`**</p> <p>```go func WithTenantIsolation(tenantID uint64, tables ...string) SQLValidationOption { return func(v *sqlValidator) { v.enableTenantInjection = true v.tenantID = tenantID v.tablesWithTenantID = make(map[string]bool) if len(tables) == 0 { // Default tables with tenant_id - MISSING: mess…</p> https://cve.radiocsirt.org/vuln/ghsa-2f4c-vrjq-rcgv