WeKnora EUVD-2026-111552

Exploitation requires an authenticated low-privilege account (PR:L) with access to the web_fetch tool or URL-based knowledge import feature. The attacker must supply a URL whose hostname resolves to a NAT64 well-known-prefix IPv6 address (64:ff9b::/96, RFC 6052) - or the deprecated IPv4-compatible ::a.b.c.d form - that embeds a restricted internal IPv4 such as a cloud metadata address (169.254.169.254) or RFC1918 host. Limiting factors: only WeKnora versions 0.2.11 through before 0.8.2 are affected; the AT:P metric reflects a required condition (the server must have a usable network path to the embedded target for the fetch to succeed); authentication is mandatory; and impact is confidentiality-only (no integrity or availability effect). Reaching cloud credentials additionally depends on the instance running in a cloud environment with an accessible metadata endpoint.

The vendor CVSS 4.0 vector (AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N, base 6.0, medium) describes a network-reachable but authenticated flaw whose only impact is confidentiality on the vulnerable system. The AT:P (attack requirement present) and PR:L (low-privilege authentication) signals both temper the network vector: this is not an unauthenticated internet-wide bug. No EPSS score is provided in the input, so exploitation probability cannot be quantified, and the vulnerability is not listed in CISA KEV - there is no confirmed active exploitation. The vuln.today decision label is 'this_month,' indicating a real but non-emergency remediation priority rather than act_now. The practical severity is driven by what SSRF to cloud metadata can yield: although rated confidentiality-only, reaching an endpoint like 169.254.169.254 can expose cloud credentials that enable follow-on compromise, so the downstream consequence may exceed the base score. Net assessment: a genuine, patch-this-cycle issue for operators of affected WeKnora instances, not a drop-everything emergency, but higher-impact than its 6.0 implies where the host runs in a cloud environment with a reachable metadata service. Missing data to note: no EPSS and no CVSS 3.1 vector were supplied; only the 4.0 vector is available.

A low-privileged authenticated user of WeKnora submits a URL (via the web_fetch tool or URL-based knowledge import) whose host resolves to a NAT64-prefixed IPv6 address such as 64:ff9b::a9fe:a9fe, which embeds the internal IPv4 169.254.169.254. The flawed isRestrictedIP() fails to look inside the NAT64 encoding and classifies the address as public, so the server dials it and returns internal-service or cloud-metadata content to the attacker. No public exploit is identified at time of analysis; a VulnCheck advisory and a GitHub issue describe the weakness.