Is CVE-2026-118376 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-118376 being exploited in the wild.

How severe is CVE-2026-118376?

Medium severity, with a CVSS score of 5.3, published 28 October 2026.

Is there a fix for CVE-2026-118376?

Yes: fixed in 0.8.2. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-118376 attacked?

It is attacked over the network, in a web application.

Am I affected by CVE-2026-118376?

Check whether you run Tencent WeKnora at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-118376: WeKnora server-side request forgery in isRestrictedIP()

CVE-2026-118376 · Severity: medium · CVSS 5.3 · Published 2026-10-28

WeKnora is an open-source LLM knowledge platform that turns documents into queryable knowledge bases and autonomous agents. The platform misclassifies NAT64-prefixed IPv6 addresses as public, allowing authenticated attackers to bypass security controls and reach internal services or cloud metadata endpoints through features like web fetching and URL-based knowledge imports.

Technologies: Tencent WeKnora. Vendors: Tencent.

Quick answers

Is CVE-2026-118376 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-118376 being exploited in the wild.
How severe is CVE-2026-118376?: Medium severity, with a CVSS score of 5.3, published 28 October 2026.
Which products and versions are affected?: Tencent WeKnora before 0.8.2.
Is there a fix for CVE-2026-118376?: Yes: fixed in 0.8.2. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-118376 attacked?: It is attacked over the network, in a web application.
Am I affected by CVE-2026-118376?: Check whether you run Tencent WeKnora at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: 0.8.2

Technical details

The vulnerability exists in the isRestrictedIP() function, which fails to properly validate NAT64-prefixed IPv6 addresses when checking if a target address is restricted. An authenticated attacker can supply URLs that resolve to NAT64 encodings of internal addresses to circumvent SSRF protections and access internal services or cloud metadata endpoints via web_fetch or URL-based knowledge import features.

Affected products

Tencent WeKnora before 0.8.2

Timeline

2026-10-28: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.