CVE-2026-88939 Details

A vulnerability in Knowns versions through 0.33.0 allows read-only agent sessions to bypass permission checks on the project.set action. This exemption enables agents to change the active project directory to one with write access capabilities. The vulnerability arises from a bootstrap action exemption that lacks proper state validation, allowing unauthorized directory switches that exploit the permission system.

To address this vulnerability, the bootstrap exemption for the project.set action should be modified to only apply when no active project store is initialized. Additionally, the directory enumeration endpoint should be restricted to allowlisted paths to prevent unauthorized traversal.