Directory Traversal Vulnerability in Knowns by Knowns-Dev
CVE-2026-30632

7.5HIGH

Key Information:

Vendor

Knowns-Dev

Status
Knowns
Vendor
CVE Published:
21 July 2026

What is CVE-2026-30632?

A directory traversal vulnerability exists in version 0.11.4 of Knowns, allowing attackers to manipulate crafted folder names within the create_doc tool. By exploiting this flaw, an attacker can traverse the directory structure and access files outside the intended directory, potentially leading to unauthorized data exposure.

References

https://gist.github.com/spdc-elm/b059904a9e351afc1f5d3835...
https://github.com/knowns-dev/knowns/commit/62fb0daaa0b9e...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.