Knowns-Dev Knowns
9 CVEs affecting Knowns-Dev Knowns. Latest disclosed: 2026-09-10. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-88899 | Critical | 9.8 | 2026-09-10 | knowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can suppl… |
CVE-2026-86543 | Critical | 9.8 | 2026-09-07 | knowns versions before 0.30.0 serve the management API without authentication on all network interfaces by default, with no password required on fresh installa… |
CVE-2026-88937 | High | 8.8 | 2026-09-10 | knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitr… |
CVE-2026-86775 | High | 8.6 | 2026-09-09 | knowns (npm package) versions <= 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normaliz… |
CVE-2026-88939 | High | 8.3 | 2026-09-10 | knowns through 0.33.0 exempts the project.set action from permission guard checks unconditionally, allowing read-only agent sessions to bypass restrictions. At… |
CVE-2026-86544 | High | 8.1 | 2026-09-07 | knowns versions before 0.30.0 contain an authorization bypass vulnerability where mutating code actions are incorrectly classified as read-only operations. Att… |
CVE-2026-86540 | High | 7.8 | 2026-09-07 | knowns versions before 0.30.0 fail to validate the settings.lsp.languages binary field in project configuration files, allowing attackers to execute arbitrary… |
CVE-2026-88938 | Medium | 6.5 | 2026-09-10 | knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywher… |
CVE-2026-88940 | Medium | 5.3 | 2026-09-10 | knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories… |