—
GO-2026-4645
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora
Quick fix
GO-2026-4645 — github.com/Tencent/WeKnora: upgrade to the fixed version with the command below.
go get github.com/Tencent/WeKnora@v0.2.10Details
WeKnora has Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation in github.com/Tencent/WeKnora
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/Tencent/WeKnora
Introduced in:
0.2.6Fixed in: 0.2.10Fix
go get github.com/Tencent/WeKnora@v0.2.10