CVE-2026-88938 knowns-dev CVE debrief

Who should care

Defenders responsible for systems using knowns through 0.33.0 should assess exposure and prioritize remediation. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify the vulnerability, assess exposure, and implement compensating controls to restrict access to sensitive files.

Why it matters

CVE-2026-88938 allows AI agent sessions to read source files anywhere on the host, potentially leading to unauthorized data access.

• Verify vulnerability in knowns through 0.33.0
• Assess exposure to unauthorized file access
• Prioritize remediation to prevent potential data breaches
• Implement compensating controls to restrict access to sensitive files

Technical summary

The code.find MCP tool in knowns through 0.33.0 fails to confine the path argument to the project root, allowing AI agent sessions to read source files anywhere on the host. Attackers can supply absolute paths or relative traversal sequences to the path argument and retrieve full file contents from outside the intended project directory. This vulnerability has a CVSS score of 7.1 and is considered HIGH severity. The CVE record was published on 2026-09-10T16:18:12.430Z and has not been modified since then. The vulnerability affects knowns through 0.33.0.

Defensive priority

Defenders should prioritize verifying the vulnerability in knowns through 0.33.0 and assessing exposure.

Recommended defensive actions

• Verify the vulnerability in knowns through 0.33.0
• Assess exposure and prioritize remediation
• Implement compensating controls to restrict access to sensitive files
• Review relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The CVE record and NVD entry provide details on the vulnerability in knowns through 0.33.0. The vulnerability allows AI agent sessions to read source files anywhere on the host. Evidence is limited to public CVE and NVD records. Defenders should verify the vulnerability in knowns through 0.33.0 and assess exposure to unauthorized file access.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.