---
id: CVE-2026-88938
title: knowns through 0.33.0 Path Traversal via code.find MCP tool
summary: >-
  knowns through 0.33.0 fails to confine the path argument of the code.find MCP
  tool to the project root, allowing AI agent sessions to read source files
  anywhere on the host. Attackers can supply absolute paths or relative
  traversal seque…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: knowns-dev
product: knowns
affected:
  - knowns <= 0.33.0
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-11T19:20:45.498663Z'
exploitAvailable: true
published: '2026-09-10'
updated: '2026-09-11'
sourceUpdated: '2026-09-11T19:20:52.053Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-88938'
references:
  - url: >-
      https://github.com/knowns-dev/knowns/security/advisories/GHSA-5cj9-fcqq-g2h7
    label: GitHub Security Advisory (GHSA-5cj9-fcqq-g2h7)
  - url: >-
      https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/mcp/handlers/code.go#L873-L902
  - url: >-
      https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/mcp/handlers/code.go#L1293-L1354
  - url: >-
      https://www.vulncheck.com/advisories/knowns-through-0.33.0-path-traversal-via-code-find-mcp-tool
    label: >-
      VulnCheck Advisory: knowns through 0.33.0 Path Traversal via code.find MCP
      tool
tags:
  - cve.org
  - exploit-available
epss: 0.00481
epssPercentile: 0.3886
ingestedAt: '2026-09-14T00:35:28.534Z'
---

## Overview

knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agent sessions to read source files anywhere on the host. Attackers can supply absolute paths or relative traversal sequences to the path argument and retrieve full file contents from outside the intended project directory.

## Affected

- `knowns <= 0.33.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.