CVE-2026-22688

Description

WeKnora has Command Injection in MCP stdio test in github.com/Tencent/WeKnora

Affected packages (2)

• Go/github.com/Tencent/WeKnorafrom 0, < 0.2.5
• Go/github.com/Tencent/WeKnorafrom 0, < 0.2.5

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-22688
• PATCHhttps://github.com/Tencent/WeKnora
• WEBhttps://github.com/Tencent/WeKnora/commit/f7900a5e9a18c99d25cec9589ead9e4e59ce04bb
• WEBhttps://github.com/Tencent/WeKnora/security/advisories/GHSA-78h3-63c4-5fqc
• WEBhttps://pkg.go.dev/vuln/GO-2026-4292