Description
knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further exploitation.
Published: 2026-09-10
Score: 6.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information disclosure through directory traversal
Action: Immediate Patch
AI Analysis

Impact

Knowns fails to validate the path query parameter in the workspace browse endpoint, which allows a remote attacker to traverse the host filesystem and enumerate arbitrarily nested directories. This directory traversal flaw (CWE‑22) can reveal the locations of project folders, providing valuable information that could be used for subsequent attacks, thus constituting a confidentiality breach.

Affected Systems

Vulnerable installations of the knowns‑dev knowns server up to and including version 0.33.0 are affected. Clients running 0.33.0 flaw.

Risk and Exploitability

The CVSS score of 6.9 indicates moderate severity. With no EPSS data available and the vulnerability not listed in the CISA KEV catalog, the likelihood of widespread exploitation is uncertain, though the flaw can be triggered remotely via HTTP requests to the workspace browse endpoint. Based on the description, it is inferred that the endpoint is accessible over the network, so attackers can reach it without local privileges, but authentication requirements are not specified.

Generated by OpenCVE AI on September 10, 2026 at 17:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to a knowns release newer than 0.33.0 where the path‑validation patch is applied.
  • If an upgrade is not feasible immediately, restrict network access to the workspace browse endpoint to trusted administrators or internal networks only.
  • Deploy a web‑application firewall or application‑level filtering that blocks requests containing path traversal sequences such as ".." or absolute paths, thereby preventing enumeration attempts.

Generated by OpenCVE AI on September 10, 2026 at 17:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 11 Sep 2026 10:00:00 +0000

Type Values Removed Values Added
First Time appeared Knowns-dev
Knowns-dev knowns
Vendors & Products Knowns-dev
Knowns-dev knowns

Thu, 10 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 10 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
Description knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further exploitation.
Title knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint
Weaknesses CWE-22
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N'}

cvssV4_0

{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Knowns-dev Knowns
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-11T11:08:00.490Z

Reserved: 2026-09-10T14:57:00.086Z

Link: CVE-2026-88940

cve-icon Vulnrichment

Updated: 2026-09-10T16:51:56.796Z

cve-icon NVD

Status : Deferred

Published: 2026-09-10T16:18:12.710

Modified: 2026-09-10T19:58:20.507

Link: CVE-2026-88940

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-11T09:45:06Z

Weaknesses
  • CWE-22

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')