CVE-2026-30855 - Vulnerability Analysis

Overview

WeKnora < 0.3.2 contains an authorization bypass caused by improper access control in tenant management endpoints, letting unauthenticated attackers register accounts and read, modify, or delete any tenant, exploit requires account registration.

Severity & Score

Impact

Unauthenticated attackers can take over or destroy any tenant account, leading to critical cross-tenant compromise.

Mitigation

Upgrade to version 0.3.2.

References

• https://github.com/Tencent/WeKnora/security/advisories/GHSA-ccj6-79j6-cq5q

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 8, 2026

🟠 CVE-2026-30855 - High (8.8) WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass in tenant management endpoints of WeKnora application allows any authenticated user to read, modif... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-30855/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner