CVE-2026-86541: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in knowns-dev knowns

CVE-2026-86541 describes a path traversal vulnerability in knowns-dev's knowns product affecting versions prior to 0.30.0. The vulnerability exists in the handleCodeReplace() function, which improperly limits pathname access, enabling attackers to write files outside the intended project directory. This can be exploited by providing absolute paths or relative paths containing directory traversal sequences, potentially allowing overwriting of critical system files.

An attacker can overwrite arbitrary files outside the project root directory, including sensitive system files like shell startup scripts and SSH configuration files. This could lead to unauthorized code execution or persistent access if malicious content is injected into these files. The vulnerability is remotely exploitable without privileges and requires user interaction.

No explicit patch or remediation details are provided in the input data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid running vulnerable versions or restrict access to the vulnerable functionality if possible.