PT-2025-39691
CVE-2025-11046
·
Published
2025-09-26
·
Updated
2026-10-09
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Tencent WeKnora version 0.1.0
Description
A security flaw exists in Tencent WeKnora version 0.1.0. The
testEmbeddingModel function within the /api/v1/initialization/embedding/test file is susceptible to server-side request forgery. Manipulation of the baseUrl argument can trigger this issue, allowing for remote exploitation. The exploit has been publicly released.Recommendations
Upgrade the affected component.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾