The flaw lies in an IP restriction check that treats NAT64‑prefixed IPv6 addresses as public. An authenticated attacker can supply a URL that resolves to a NAT64 representation of an internal address through the web_fetch or URL‑based knowledge import functions. This allows the server to perform outbound requests to internal services or cloud metadata endpoints, potentially exposing sensitive data or facilitating further lateral movement. The weakness is classified as CWE‑918 and provides the attacker with the ability to bypass network isolation controls.

Tencent WeKnora deployments running any version earlier than 0.8.2 are affected. The vulnerability exists in the isRestrictedIP function of the WeKnora codebase and would impact all configurations that expose the web_fetch or knowledge import features to authenticated users.

The CVSS score of 6 indicates a medium severity. No EPSS score is provided, and the vulnerability is not listed in CISA’s KEV catalog, suggesting limited public exploitation. However, the required attacker posture—authenticated access to the service—means that compromised or weak credentials could be sufficient. The attack vector is network‑based with the attacker triggering SSRF internally. Given the medium CVSS score and lack of exploitation evidence, the risk is moderate but significant for systems that expose internals to the public or rely on strict internal network separation.