https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 20:22:29 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-274987 EUVD-2026-274987 https://cve.radiocsirt.org/vuln/euvd-2026-274987 https://cve.radiocsirt.org/vuln/fkie_cve-2026-30861 <p>WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an unauthenticated remote code execution (RCE) vulnerability exists in the MCP stdio configuration validation. The application allows unrestricted user registration, meaning any attacker can create an account and exploit the command injection flaw. Despite implementing a whitelist for allowed commands (npx, uvx) and blacklists for dangerous arguments and environment variables, the validation can be bypassed using the -p flag with npx node. This allows any attacker to execute arbitrary commands with the application&#39;s privileges, leading to complete system compromise. This issue has been patched in version 0.2.10.</p> <p>WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an unauthenticated remote code execution (RCE) vulnerability exists in the MCP stdio configuration validation. The application allows unrestricted user registration, meaning any attacker can create an account and exploit the command injection flaw. Despite implementing a whitelist for allowed commands (npx, uvx) and blacklists for dangerous arguments and environment variables, the validation can be bypassed using the -p flag with npx node. This allows any attacker to execute arbitrary commands with the application&#39;s privileges, leading to complete system compromise. This issue has been patched in version 0.2.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-30861 https://cve.radiocsirt.org/vuln/ghsa-r55h-3rwj-hcmg <p><strong>Affected:</strong> Go: github.com/Tencent/WeKnora</p> <p>### Summary</p> <p>A critical unauthenticated remote code execution (RCE) vulnerability exists in the MCP stdio configuration validation introduced in version 2.0.5.</p> <p>The application allows unrestricted user registration, meaning any attacker can create an account and exploit the command injection flaw. Despite implementing a whitelist for allowed commands (`npx`, `uvx`) and blacklists for dangerous arguments and environment variables, the validation can be bypassed using the `-p` flag with `npx node`. This allows any attacker to execute arbitrary commands with the application&#39;s privileges, leading to complete system compromise.</p> <p>The vulnerability remained unfixed across multiple releases (2.0.6-2.0.9) before being silently patched in version 2.0.10, without a published CVE, potentially leaving customers unaware.</p> <p>### Details</p> <p>The application&#39;s open registration policy, combined with the vulnerable MCP stdio configuration, creates an unrestricted attack surface. Any attacker can: 1. Register a new account without restrictions (no email verification, approval process, or rate limiting mentioned) 2. Obtain API authentication credentials 3. Exploit the command injection vulnerability to execute arbitrary code</p> <p>The security patch introduced in commit f7900a5e9a18c99d25cec9589ead9e4e59ce04bb attempts to prevent command injection through: 1. **Command Whitelist**: Only `uvx` and `npx` are allowed 2. **Argument Blacklist**: Blocks dangerous patterns including shells, command chaining,…</p> <p><strong>Affected:</strong> Go: github.com/Tencent/WeKnora</p> <p>### Summary</p> <p>A critical unauthenticated remote code execution (RCE) vulnerability exists in the MCP stdio configuration validation introduced in version 2.0.5.</p> <p>The application allows unrestricted user registration, meaning any attacker can create an account and exploit the command injection flaw. Despite implementing a whitelist for allowed commands (`npx`, `uvx`) and blacklists for dangerous arguments and environment variables, the validation can be bypassed using the `-p` flag with `npx node`. This allows any attacker to execute arbitrary commands with the application&#39;s privileges, leading to complete system compromise.</p> <p>The vulnerability remained unfixed across multiple releases (2.0.6-2.0.9) before being silently patched in version 2.0.10, without a published CVE, potentially leaving customers unaware.</p> <p>### Details</p> <p>The application&#39;s open registration policy, combined with the vulnerable MCP stdio configuration, creates an unrestricted attack surface. Any attacker can: 1. Register a new account without restrictions (no email verification, approval process, or rate limiting mentioned) 2. Obtain API authentication credentials 3. Exploit the command injection vulnerability to execute arbitrary code</p> <p>The security patch introduced in commit f7900a5e9a18c99d25cec9589ead9e4e59ce04bb attempts to prevent command injection through: 1. **Command Whitelist**: Only `uvx` and `npx` are allowed 2. **Argument Blacklist**: Blocks dangerous patterns including shells, command chaining,…</p> https://cve.radiocsirt.org/vuln/ghsa-r55h-3rwj-hcmg