8.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-22687

CVE-2026-22687: WeKnora vulnerable to SQL Injection

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, after WeKnora enables the Agent service, it allows users to call the database query tool. Due to insufficient backend validation, an attacker can use prompt‑based bypass techniques to evade query restrictions and obtain sensitive information from the target server and database. This issue has been patched in version 0.2.5.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-22687

CVE-2026-22687:

8.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/Tencent/WeKnora	go	< 0.2.5	0.2.5

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is a classic SQL injection arising from improper input validation. The DatabaseQueryTool.validateAndSecureSQL function attempted to secure raw SQL queries by using regular expressions and string matching to filter out dangerous keywords and restrict table access. This approach is notoriously brittle and was bypassed in two ways: first, by using comments (/**/) to break the regex patterns used for table name extraction, and second, by invoking dangerous built-in PostgreSQL functions (like pg_ls_dir) that were not included in the keyword denylist.

The DatabaseQueryTool.Execute function orchestrates the attack by first calling the vulnerable validation function and then executing the resulting, and still malicious, SQL query. The fix involves a complete overhaul of the validation logic. Instead of using regex, the patched code utilizes the pg_query_go library to parse the SQL into an Abstract Syntax Tree (AST). This allows for a much more robust and secure analysis of the query structure, ensuring that only whitelisted tables and functions are used and preventing malicious constructs like subqueries or dangerous function calls.

Vulnerable functions

DatabaseQueryTool.validateAndSecureSQL

internal/agent/tools/database_query.go

This function was responsible for validating and sanitizing user-provided SQL queries before execution. Its implementation relied on string manipulation and regular expressions, which was insufficient to prevent SQL injection. Attackers could bypass the validation using techniques like inserting comments (`/**/`) or using dangerous PostgreSQL functions that were not on the denylist (e.g., `pg_ls_dir`). The patch completely replaces this flawed logic with a robust validation mechanism based on a proper SQL parser.

DatabaseQueryTool.Execute

internal/agent/tools/database_query.go

This function is the execution sink for the vulnerability. It takes the user-provided SQL query, passes it to the flawed `validateAndSecureSQL` function for sanitization, and then executes the resulting query against the database using `Raw()`. Because the validation in `validateAndSecureSQL` could be bypassed, this `Execute` function would ultimately run the malicious SQL provided by the attacker.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.