A path traversal flaw exists in the handleCodeReplace() function of knowns before version 0.30.0, allowing an attacker to write arbitrary content outside the project root by supplying absolute or relative paths that include traversal sequences. The affected code can overwrite critical files such as shell startup scripts or SSH configuration files, potentially enabling persistent or privilege‑escalating attacks. This weakness directly compromises the integrity of the filesystem and may lead to remote code execution.

The vulnerability affects all releases of knowns-dev:knowns older than 0.30.0. No further version granularity is provided, so any instance running a pre‑0.30.0 build is considered susceptible.

The CVSS score of 7.2 indicates a moderately high threat. No EPSS data was reported, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, as the code replacement operation is exposed through the MCP action interface. An attacker can trigger the vulnerability by sending crafted replacement requests, leading to unauthorized file writes on the host that hosts the knowns instance.