Server-Side Request Forgery Vulnerability in WeKnora by Tencent

CVE-2026-118376

What is CVE-2026-118376?

WeKnora prior to version 0.8.2 is susceptible to a server-side request forgery (SSRF) vulnerability. This flaw occurs in the isRestrictedIP() function, which incorrectly classifies NAT64-prefixed IPv6 addresses as public. As a result, authenticated attackers can exploit this vulnerability by supplying URLs that resolve to NAT64 encodings of internal addresses. Through mechanisms like web_fetch or URL-based knowledge import, they can access internal services or potentially sensitive cloud metadata endpoints, compromising the security of the affected systems.

References