CVE-2026-30855

CVE-2026-30855 is an authorization bypass vulnerability in WeKnora, an LLM-powered framework, affecting versions prior to 0.3.2. This flaw allows any authenticated user to read, modify, or delete any tenant by ID. Given open account registration, an unauthenticated attacker can register, then exploit this to achieve cross-tenant account takeover and destruction. The vulnerability has a CVSS score of 8.8 (High), indicating a critical impact with high confidentiality, integrity, and availability concerns, requiring only low privileges and no user interaction for exploitation. It is a network-based attack with low complexity. There is no evidence of active exploitation, nor are there public exploit codes available in Metasploit, Nuclei, or ExploitDB. However, the vulnerability has garnered some community discussion, with two mentions on social media platforms.