WeKnora MCP Config-Driven RCE (CVE-2026-22688) - ATR-2026-00418 (0850c535-4ee8-56fc-a77b-fbfee0373250)
Detects exploitation of CVE-2026-22688 in Tencent WeKnora. The MCP plugin loader reads server configuration from user-writable JSON / YAML files without authentication or origin verification, treating the command field as an OS-exec target. An attacker who can write to the config directory (e.g. via shared volume, supply-chain commit, or cross-tenant misconfig) achieves persistent RCE on the WeKnora host the next time the loader runs. Same root cause class as the OX-disclosure 2026-04-15 batch, but the delivery vector is config-file injection rather than HTTP registration.