CVE-2026-30633

HighCVSS 7.5

Published: 21/07/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.66%

48th percentile - higher than 48% of all known CVEs

Summary

Directory traversal vulnerability in knowns-dev/knowns 0.11.4. An attacker can use a crafted path in the get_doc and update_doc tools to access files outside the intended directory.

Risk Assessment

An attacker can read or modify sensitive files on the server, potentially leading to data leakage or takeover.

Recommendation

Upgrade knowns-dev/knowns to a version later than 0.11.4 that contains the fix.

Other vulnerabilities in knowns-dev/knowns

CVE-2026-30632High
Directory traversal vulnerability in the create_doc tool of knowns-dev/knowns 0.11.4. An attacker can use a crafted folder name to read files outside the allowed directory.

Original NVD description (English source)

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools.