CVE-2026-91750 Tencent CVE debrief

Who should care

Defenders responsible for WeKnora instances, especially those exposed to the internet or with public-facing APIs, should assess their exposure and risk. Cloud security teams and administrators of internal services may also need to verify potential impact.

Why it matters

CVE-2026-91750 is a high-severity vulnerability in WeKnora that allows authenticated attackers to bypass SSRF validation, potentially granting access to internal services and cloud metadata. Defenders should prioritize verifying exposure of WeKnora instances, especially those with public-facing APIs, and assess the risk of internal service access.

• Potential access to internal services via SSRF
• Possible exposure of cloud metadata
• Risk of unauthorized internal network scanning
• Need for verification of WeKnora instance exposure and version

Technical summary

The vulnerability exists in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint of WeKnora before version 0.7.0. When downloading documents from user-supplied URLs, the application fails to re-validate HTTP redirect targets, allowing authenticated attackers to bypass initial SSRF validation. This occurs because the application does not properly verify the redirect targets, enabling attackers to access internal services and cloud metadata. Defenders should prioritize verifying exposure of WeKnora instances, especially those with public-facing APIs, and assess the risk of internal service access.

Defensive priority

Defenders should prioritize verifying exposure of WeKnora instances, especially those with public-facing APIs, and assess the risk of internal service access.

Recommended defensive actions

• Verify WeKnora instance exposure, especially for public-facing APIs
• Assess the risk of internal service access via SSRF
• Update to version 0.7.0 or later if possible
• Monitor for suspicious API activity
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability is caused by the failure to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint. This allows attackers to bypass initial SSRF validation.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.