CVE-2026-88937: knowns through 0.33.0 Path Traversal via Template Engine
knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal credentials, or achieve persistent code execution on victim systems.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users of knowns through version 0.33.0 are exposed when they process attacker-supplied or otherwise untrusted code-generation templates. Exploitation occurs on the victim system running the template engine.
What does an attacker need to exploit it?
The attacker needs to supply a malicious template with destination paths that traverse outside the project root. No authentication or elevated privileges are required, but user interaction is required according to the supplied severity vector.
What is the impact if exploitation succeeds?
A malicious template can read or write arbitrary files outside the project root. This can enable credential theft, overwriting shell profiles, persistence, or code execution on the victim system.