Knowns-dev Knowns vulnerabilities

• knowns-dev knowns knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint CVE-2026-88940 6.9 MediumSeptember 10, 2026
• knowns-dev knowns knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption CVE-2026-88939 8.7 HighSeptember 10, 2026
• knowns-dev knowns knowns through 0.33.0 Path Traversal via code.find MCP tool CVE-2026-88938 7.1 HighSeptember 10, 2026
• knowns-dev knowns knowns through 0.33.0 Path Traversal via Template Engine CVE-2026-88937 8.6 HighSeptember 10, 2026
• knowns-dev knowns knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header CVE-2026-88899 Public exploit 9.3 CriticalSeptember 10, 2026
• knowns-dev knowns knowns before 0.30.0 Path Traversal via Document API CVE-2026-86775 8.8 HighSeptember 9, 2026
• knowns-dev knowns knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions CVE-2026-86544 7.2 HighSeptember 7, 2026
• knowns-dev knowns knowns before 0.30.0 Unauthenticated Management API Exposure CVE-2026-86543 9.3 CriticalSeptember 7, 2026
• knowns-dev knowns knowns before 0.30.0 Path Traversal via Import Name CVE-2026-86542 8.8 HighSeptember 7, 2026
• knowns-dev knowns knowns before 0.30.0 Path Traversal via code.replace MCP action CVE-2026-86541 7.2 HighSeptember 7, 2026
• knowns-dev knowns knowns before 0.30.0 Arbitrary Code Execution via LSP Binary CVE-2026-86540 Fix available 8.5 HighSeptember 7, 2026
• knowns-dev knowns knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint CVE-2026-86539 6.9 MediumSeptember 7, 2026
• knowns-dev knowns knowns before 0.30.0 Path Traversal via templateFile parameter CVE-2026-86538 8.7 HighSeptember 7, 2026
• knowns-dev knowns knowns before 0.30.0 Path Traversal via MCP doc and memory tools CVE-2026-86439 Fix available 8.7 HighSeptember 7, 2026