CVE-2026-88940: knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-10 · updated 2026-09-10
Weakness: CWE-22

Description

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further exploitation.

Affected products

knowns-dev knowns: through 0.33.0

References

https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/server/routes/workspace.go#L42-L110
https://github.com/knowns-dev/knowns/security/advisories/GHSA-h73x-698r-qrvg
https://www.vulncheck.com/advisories/knowns-through-0.33.0-arbitrary-directory-enumeration-via-workspace-browse-endpoint
https://github.com/knowns-dev/knowns/security/advisories/GHSA-h73x-698r-qrvg

Get alerted when CVE-2026-88940 or the next vulnerability affects your stack