WeKnora, an LLM-powered framework for document understanding and semantic retrieval, contains a critical authorization bypass vulnerability in tenant management endpoints prior to version 0.3.2. The vulnerability allows any authenticated user to read, modify, or delete any tenant by ID. Combined with open public registration, this enables unauthenticated attackers to register accounts and exploit the system. The impact includes cross-tenant account takeover and destruction capabilities. The issue has been patched in version 0.3.2.