CVE-2026-88940

MEDIUM 5.3

knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint

CVSS Score

5.3

EPSS Score

0.0%

EPSS Percentile

0th

knowns through 0.33.0 fails to validate the path query parameter in the workspace browse endpoint, allowing remote attackers to enumerate arbitrary directories on the host filesystem. Attackers can traverse the directory structure to locate project directories and identify targets for further exploitation.

CWE	CWE-22
Vendor	knowns-dev
Product	knowns
Published	Sep 10, 2026
Last Updated	Sep 11, 2026

Stay Ahead of the Next One

Get instant alerts for knowns-dev knowns

Be the first to know when new medium vulnerabilities affecting knowns-dev knowns are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

knowns-dev / knowns

0 ≤ 0.33.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/knowns-dev/knowns/security/advisories/GHSA-h73x-698r-qrvg github.com: https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/server/routes/workspace.go#L42-L110 vulncheck.com: https://www.vulncheck.com/advisories/knowns-through-0.33.0-arbitrary-directory-enumeration-via-workspace-browse-endpoint

Credits

Tong Hoang Gia (uziii2208)