CVE-2026-86541 | knowns-dev knowns up to 0.29.x handleCodeReplace path traversal

September 8, 2026 Yanac

A vulnerability classified as critical was found in knowns-dev knowns up to 0.29.x. Affected by this issue is the function handleCodeReplace. Such manipulation leads to path traversal.

This vulnerability is documented as CVE-2026-86541. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More