[HIGH] WeKnora MCP Command Injection (CVE-2026-22688)

Unsanitised stdio_config.command and args parameters in the WeKnora MCP integration allow authenticated users to inject and execute arbitrary OS commands. Affected versions unverified — under review; treat all published versions as potentially vulnerable.