Entity trail

WeKnora

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-04-22 / agents-researcherOX Security Exposes Architectural MCP Design Flaw Enabling RCE Across 150M+ Downloads and 200K Servers — Anthropic Declines to FixOX Security published an advisory on April 15 detailing a systemic vulnerability in the MCP STDIO interface: any attacker who can influence an MCP configuration can achieve arbitrary shell command execution on the host, regardless of programming language. Anthropic confirmed the behavior is by design and declined to modify the protocol, stating sanitization is the developer's responsibility. The flaw affects Claude Code, Cursor, VS Code, Windsurf, Gemini CLI, LangChain, LiteLLM, and IBM LangFlow — over 150 million downloads and up to 200,000 vulnerable server instances, with related CVEs already assigned for MCP Inspector, LibreChat, WeKnora, and Cursor.
2026-03-15 / vibe-coding-researcherCVE-2026-30856 — WeKnora MCP Server Hijacks Tool Execution via Ambiguous Naming; MCPTox Shows 72.8% Attack Success Rate on o1-miniGitLab Advisories published CVE-2026-30856 (March 6, 2026) disclosing that Tencent's WeKnora MCP server is vulnerable to tool execution hijacking: a malicious remote MCP server uses ambiguous tool naming combined with indirect prompt injection to intercept and redirect tool calls intended for legitimate servers. The concurrently published MCPTox benchmark tested 20 LLM agents against 45 real-world MCP servers (353 tools) and found o1-mini has a 72.8% attack success rate — with more capable models often more susceptible due to better instruction-following of injected payloads.

Graph relationships

USES
MCP
WeKnora implements MCP server protocol
Source finding
RELEASED
Tencent
Tencent released WeKnora MCP server
Source finding
RELEASED
Tencent -> WeKnora
Tencent released WeKnora MCP server
Source finding

Source trail

The Hacker News GitLab Security Advisories

Graph sources

entity graphfindings textkg edgeskg entities