CVE-2026-120325 Webpro-nl CVE debrief

Who should care

Defenders responsible for Webpro-nl Knip deployments should assess exposure and prioritize verification. This includes operators, platform administrators, vulnerability management teams, and security teams who manage or use Webpro-nl Knip. They should verify the affected version of Webpro-nl Knip in their environment, assess exposure to the path traversal vulnerability, and consider applying patches or mitigations if available.

Why it matters

Defenders should prioritize verifying the affected version and assessing exposure in their environment due to the potential for path traversal attacks.

• Verify affected versions and assess exposure
• Potential path traversal attacks require mitigation
• Remote attack surface requires assessment

Technical summary

The function writeFile in packages/knip/src/IssueFixer.ts is vulnerable to path traversal attacks. The attack can be executed remotely. This vulnerability is located in the Workspace Handler component of Webpro-nl Knip, specifically in the writeFile function of the IssueFixer.ts file. The vulnerability allows for path traversal through manipulation of the workspaces argument. Defenders should prioritize verifying the affected version and assessing exposure in their environment due to the potential for path traversal attacks.

Defensive priority

Defenders should prioritize verifying the affected version and assessing exposure in their environment.

Recommended defensive actions

• Verify the affected version of Webpro-nl Knip in your environment.
• Assess exposure to the path traversal vulnerability.
• Consider applying patches or mitigations if available
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability. Further verification is required to determine the affected versions and potential impact. The source details indicate that the vulnerability is in the writeFile function of the IssueFixer.ts file within the Workspace Handler component of Webpro-nl Knip. However, specific details about the versions affected and the full scope of the vulnerability are not provided. Defenders should verify the affected version of Webpro-nl Knip in their environment and to

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.