Path Traversal Vulnerability in Knowns Before 0.30.0 by Known

CVE-2026-86542

What is CVE-2026-86542?

The vulnerability in Knowns versions prior to 0.30.0 allows unauthenticated attackers to exploit the import routes by injecting traversal sequences into the name parameter. This can lead to unauthorized writing of files outside the designated imports directory, potentially overwriting sensitive files that are writable by the server process. A patch has been issued in version 0.30.0 to address this issue and secure against such attacks.

References