CVE-2026-88940CWE-22path-traversal

CVE-2026-88940

Medium · published September 10, 2026

CVSS v3.1
5.3
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further exploitation.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00559 · 45.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-10T20:18Z
References (4)
https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/server/routes/workspace.go#L42-L110 · [email protected]https://github.com/knowns-dev/knowns/security/advisories/GHSA-h73x-698r-qrvg · [email protected]https://www.vulncheck.com/advisories/knowns-through-0.33.0-arbitrary-directory-enumeration-via-workspace-browse-endpoint · [email protected]https://github.com/knowns-dev/knowns/security/advisories/GHSA-h73x-698r-qrvg · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 12 SEP 03:22Z
    EPSS moved — → 0%
    epss
  • 10 SEP 15:28Z
    knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint
    cvelistv5