{"data":{"id":"537185db-2974-4598-998e-7f41d17e01d1","title":"GHSA-8w32-6mrw-q5wv: WeKnora Vulnerable to Remote Code Execution via SQL Injection Bypass in AI Database Query Tool","summary":"A critical remote code execution flaw in WeKnora's database query tool lets an unauthenticated attacker run arbitrary code on the database server with database user privileges. The Phase 5 validateNode() function in internal/utils/inject.go has no handler for ArrayExpr or RowExpr nodes, so dangerous PostgreSQL functions such as pg_read_file() nested inside array expressions skip validation and pass all seven checks.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-8w32-6mrw-q5wv","publishedAt":"2026-03-06T23:59:20.000Z","cveId":"CVE-2026-30860","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/Tencent/WeKnora@<= 2.0.11"],"affectedPackageNames":["github.com/tencent/weknora"],"affectedPackageRefs":["go:github.com/tencent/weknora"],"affectedVendors":[],"affectedVendorsRaw":["WeKnora","GLM","Z.AI"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00735,"epssCheckedAt":"2026-11-04T06:10:14.970Z","kevDateAdded":null,"advisoryAliases":["GHSA-8w32-6mrw-q5wv"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}