WeKnora, an LLM-powered document understanding framework, contains a critical remote code execution vulnerability in versions prior to 0.2.12. The vulnerability exists in the database query functionality where validation fails to inspect child nodes in PostgreSQL array and row expressions. Attackers can bypass SQL injection protections by smuggling dangerous PostgreSQL functions and chaining them with large object operations. This allows unauthenticated attackers to achieve arbitrary code execution on the database server with database user privileges. The issue has been patched in version 0.2.12.