WeKnora before version 0.7.0 does not re‑validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint. An attacker who can authenticate to the system may supply a public URL that redirects to an internal address, thereby bypassing the original SSRF check. This flaw is a classic server‑side request forgery, classified as CWE‑918, and can expose internal services, cloud metadata, or other sensitive resources to the attacker.

The vulnerable software is Tencent WeKnora, any release before 0.7.0 (for example version 0.6.2). The issue arises on the endpoint used to download documents from user‑supplied URLs. All deployments of these releases that expose the endpoint to authenticated users are affected.

The vulnerability carries a CVSS score of 7.1, indicating moderate to high severity. The EPSS score is <1%, suggesting a very low but non‑zero chance of exploitation. The issue is not listed in CISA’s KEV catalog. Exploitation requires authentication and the ability to issue a POST request to the endpoint, but an attacker can trivially construct a redirecting public URL to target internal networks, making the attack likely feasible for users with legitimate access privileges.