Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a DNS rebinding vulnerability in the web_fetch tool allows an unauthenticated attacker to bypass URL validation and access internal resources on the server, including private IP addresses (e.g., 127.0.0.1, 192.168.x.x). By crafting a malicious domain that resolves to a public IP during validation and subsequently resolves to a private IP during execution, an attacker can access sensitive local services and potentially exfiltrate data. This issue has been patched in version 0.3.0.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30858 DNS Rebinding Vulnerability in WeKnora Web Fetch Tool Before 0.3.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30858
Post summary
This excerpt is a straightforward disclosure describing a DNS rebinding vulnerability affecting the WeKnora Web Fetch Tool (versions prior to 0.3.0); no PoC, exploit, patch, or active exploitation details are provided.
CVE-2026-30858 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a DNS rebinding vulnerability in the web_… https://www.cve.org/CVERecord?id=CVE-2026-30858
Post summary
The text briefly announces CVE‑2026‑30858, noting a DNS rebinding vulnerability in WeKnora prior to version 0.3.0 and provides a link to the CVE record.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-30858 - WeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal Resources Intel Report: https://ift.tt/aCHZ8Ty
Post summary
The post announces the discovery of CVE-2026-30858, a DNS rebinding flaw in the WeKnora web_fetch tool that can lead to SSRF against internal resources, with a link to an intel report for further details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tencent | weknora | - | - | - |