These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-86540 debrief based on the supplied source corpus. The CVE record was published on 2026-09-07T23:16:53.723Z and has not been modified since then. This vulnerability affects Knowns versions before 0.30.0, where the failure to validate the settings.lsp.languages binary field in project configuration files could allow attackers to execute arbitrary binaries by crafting a malicious .knowns/config.jso [truncated]
CVE-2026-88939 debrief based on the supplied source corpus. The vulnerability allows read-only agent sessions to bypass restrictions via project.set actions, potentially leading to unauthorized access. Defenders should assess exposure and prioritize remediation for knowns installations. The CVE record and NVD entry provide details on the vulnerability, but vendor remediation and affected scope require ver [truncated]
CVE-2026-88938 debrief based on the supplied source corpus. The code.find MCP tool in knowns through 0.33.0 fails to confine the path argument to the project root, allowing AI agent sessions to read source files anywhere on the host. This vulnerability allows attackers to supply absolute paths or relative traversal sequences to the path argument and retrieve full file contents from outside the intended pr [truncated]
CVE-2026-88899 is a critical vulnerability in knowns versions before 0.31.0, allowing remote attackers to execute file operations outside the project root on the host system via the x-opencode-directory request header in the /api/opencode proxy endpoint. This vulnerability has a CVSS score of 9.3 and is considered critical. Defenders should assess exposure and prioritize upgrading to version 0.31.0 or lat [truncated]
CVE-2026-86775 is a high-severity path traversal vulnerability in the knowns npm package versions <= 0.29.1. The vulnerability allows a remote unauthenticated attacker to read, create, overwrite, or delete arbitrary files with a .md extension anywhere on the host filesystem and create arbitrary directories. This can expose sensitive data stored in other projects' documentation, corrupt or destroy files, a [truncated]
CVE-2026-86543 debrief based on 9 supplied source links. Versions before 0.30.0 of an unnamed product have an unauthenticated management API by default. The API's /api/tunnel/start endpoint allows tunnel provisioning and republishing at a public address. This vulnerability is critical as it allows attackers to access and republish the API at a publicly accessible address without authentication. Defenders [truncated]
CVE-2026-86542 debrief based on the supplied source corpus. The CVE record was published on 2026-09-07T23:16:54.020Z and has not been modified since then. The vulnerability affects knowns versions before 0.30.0, allowing unauthenticated attackers to write files outside the imports directory via traversal sequences in the name parameter. Defenders should assess exposure and prioritize verification and reme [truncated]
CVE-2026-86541 is a path traversal vulnerability in the handleCodeReplace() function of versions before 0.30.0 of an unknown product from Unknown Vendor. The vulnerability allows attackers to overwrite arbitrary files outside the project root by supplying absolute or relative paths with directory traversal sequences. This can lead to writing malicious content to sensitive files such as shell startup scrip [truncated]
A server-side request forgery vulnerability exists in knowns through version 0.33.0 in the POST /api/embedding-models/test endpoint. This endpoint issues outbound requests to caller-supplied destinations without validation, allowing attackers to enumerate internal hosts and cloud metadata endpoints by observing transport error messages that reveal network reachability information.
CVE-2026-86538 debrief based on the supplied source corpus. The CVE record was published on 2026-09-07T23:16:53.443Z and has not been modified since then. The vulnerability is a path traversal vulnerability in Knowns versions before 0.30.0 that allows unauthenticated attackers to read arbitrary files through the JSON response in the POST /api/templates/preview endpoint. Defenders should prioritize verifyi [truncated]
CVE-2026-86439 debrief based on 8 source links from the CVE Program and [email protected]. Versions before 0.30.0 of the knowns tool are vulnerable to path traversal attacks via MCP tool arguments, allowing attackers to read, create, overwrite, and delete files outside the project directory. The vulnerability has a high CVSS score of 8.7, indicating a high severity. Defenders should assess exposure [truncated]
A directory traversal vulnerability was found in knowns-dev/knowns 0.11.4. The vulnerability allows attackers to access files outside the intended directory by providing a crafted path value to the get_doc and update_doc tools. This issue has a CVSS score of 7.5 and is classified as HIGH severity. Users of knowns-dev/knowns 0.11.4 should apply patches or mitigations to prevent directory traversal attacks. [truncated]
CVE-2026-30632 is a HIGH severity vulnerability in knowns-dev/knowns 0.11.4. A directory traversal vulnerability exists via a crafted folder name value to the create_doc tool. The CVSS score is 7.5, indicating a HIGH severity level. The vulnerability allows attackers to traverse directories, potentially leading to unauthorized access or data exposure. Users of knowns-dev/knowns 0.11.4 should review and ap [truncated]