CVE-2026-86544 | knowns-dev knowns up to 0.29.x Code Actions code.replace authorization

September 8, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in knowns-dev knowns up to 0.29.x. This affects the function code.replace of the component Code Actions. Performing a manipulation results in authorization bypass.

This vulnerability is reported as CVE-2026-86544. The attack is possible to be carried out remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More