Andre Gironda@AndreGironda
CVE-2026-30632 Path Traversal in knowns-dev/knowns 0.11.4 MCP create_doc tool .md File Write Outside Intended Directory -- https://gist.github.com/spdc-elm/b059904a9e351afc1f5d38351f8b9ea5
00000139
3.9K followersView on X
CVE-2026-30632
LOWCVSS 7.5 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-22
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day