CVE-2026-22688

CVE-2026-22688 is a critical command injection vulnerability affecting Tencent WeKnora, an LLM-powered framework, prior to version 0.2.5. Authenticated users can inject malicious commands into MCP stdio settings, leading to arbitrary code execution on the server. With a CVSS score of 8.8 (High), this vulnerability allows for complete compromise of confidentiality, integrity, and availability with low attack complexity and no user interaction required. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion with 13 mentions, indicating awareness and potential for future exploitation.