CVE-2026-118376

MEDIUM 5.3

WeKnora before 0.8.2 SSRF Guard Bypass via NAT64 IPv6 Addresses

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

WeKnora before 0.8.2 contains a server-side request forgery vulnerability in isRestrictedIP() that misclassifies NAT64-prefixed IPv6 addresses as public. Authenticated attackers can supply URLs resolving to NAT64 encodings of internal addresses via web_fetch or URL-based knowledge import to reach internal services or cloud metadata endpoints.

CWE	CWE-918
Vendor	tencent
Product	weknora
Published	Oct 28, 2026

Stay Ahead of the Next One

Get instant alerts for tencent weknora

Be the first to know when new medium vulnerabilities affecting tencent weknora are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Affected Versions

Tencent / WeKnora

0.2.11 < 0.8.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Tencent/WeKnora/issues/4092 github.com: https://github.com/Tencent/WeKnora/commit/ff818b681f10bc29edbc48fe35f00009dc276bfa github.com: https://github.com/Tencent/WeKnora/commit/d7ccd5ba517cc3968e6d5000a2ab0f4b51ef1dda github.com: https://github.com/Tencent/WeKnora/blob/3d5d8bfcdfeeea266b292b71cea616847af28d0f/internal/utils/security.go#L267-L327 github.com: https://github.com/Tencent/WeKnora/releases/tag/v0.8.2 github.com: https://github.com/Tencent/WeKnora vulncheck.com: https://www.vulncheck.com/advisories/weknora-before-0.8.2-ssrf-guard-bypass-via-nat64-ipv6-addresses

Credits

George Chen