Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in the database query tool allows any authenticated tenant to read sensitive data belonging to other tenants, including API keys, model configurations, and private messages. The application fails to enforce tenant isolation on critical tables (models, messages, embeddings), enabling unauthorized cross-tenant data access with user-level authentication privileges. This issue has been patched in version 0.2.12.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30859 Tenant Data Exposure Vulnerability in WeKnora LLM Framework Before 0.2.12 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30859
Post summary
The post announces a tenant data exposure vulnerability (CVE‑2026‑30859) affecting the WeKnora LLM Framework versions prior to 0.2.12, without providing exploit code, patches, or evidence of active exploitation.
CVE-2026-30859 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control vulnerability in… https://www.cve.org/CVERecord?id=CVE-2026-30859
Post summary
The post announces a broken access control vulnerability in WeKnora before version 0.2.12, referencing the CVE record, but provides no technical details, exploit code, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-30859 - WeKnora: Broken Access Control - Cross-Tenant Data Exposure Intel Report: https://ift.tt/FZujgvK
Post summary
An alert announces CVE-2026-30859 as a broken access control issue leading to cross‑tenant data exposure, with an intel report linked for details, but offers no proof of concept, exploit code, or mention of patches.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | tencent | weknora | - | - | - |