CVE-2026-30632 is a directory traversal vulnerability affecting knowns-dev/knowns version 0.11.4. The vulnerability arises from improper validation of folder name inputs in the create_doc tool, which can be exploited by supplying crafted folder names to access files or directories outside the permitted scope.

Successful exploitation could allow an attacker to read or write files outside the intended directories, potentially leading to unauthorized disclosure or modification of sensitive data. No evidence of known exploits in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, avoid using untrusted input for folder names in the create_doc tool or restrict its usage to trusted users only.