CVE-2026-88938 Details

A path traversal vulnerability has been identified in the 'code.find' MCP tool of Known's project management software, affecting versions through 0.33.0. The vulnerability arises because the tool does not properly confine the path argument to the project root. This oversight allows AI agent sessions to read source files from anywhere on the host filesystem. Attackers can exploit this by supplying absolute paths or relative traversal sequences, such as '../', to the path argument, thereby accessing files outside the intended project directory. The issue is rooted in the 'findCodeFiles' function, which constructs the search base directory using raw filepath operations without proper boundary checks, unlike other code-related handlers that enforce project-root containment.

To address this vulnerability, the 'path' argument in the 'handleCodeFind' function should be validated using 'safepath.ResolveProject' to ensure it remains within the project boundaries. This change should be applied before the 'findCodeFiles' function is called.