CVE-2026-30632

HighCVSS 7.5

Published: 21/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

48th percentile - higher than 48% of all known CVEs

Summary

Directory traversal vulnerability in the create_doc tool of knowns-dev/knowns 0.11.4. An attacker can use a crafted folder name to read files outside the allowed directory.

Risk Assessment

The organization is at risk of leaking sensitive data stored on the server, including configuration files and user data.

Recommendation

Update knowns-dev/knowns to the latest version that fixes this vulnerability. Restrict access to the create_doc tool to trusted users only.

Other vulnerabilities in knowns-dev/knowns

CVE-2026-30633High
Directory traversal vulnerability in knowns-dev/knowns 0.11.4. An attacker can use a crafted path in the get_doc and update_doc tools to access files outside the intended directory.

Original NVD description (English source)

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool.