Quick answers
- Is CVE-2026-30633 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-30633 being exploited in the wild.
- How severe is CVE-2026-30633?
- Informational severity, with a CVSS score of 5.3, published 21 July 2026.
- Which products and versions are affected?
- Knowns-Dev Knowns <= 0.11.4.
- Is there a fix for CVE-2026-30633?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-30633 attacked?
- It is attacked over the network or with local access, in a software library.
- Am I affected by CVE-2026-30633?
- Check whether you run Knowns-Dev Knowns at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
A directory traversal vulnerability exists in the `resolveDocPath` function within `src/mcp/handlers/doc.ts`. The function fails to sanitize or validate `../` sequences in the `path` parameter before joining it with the base documentation directory. An attacker can exploit this via the Model Context Protocol (MCP) interface using the `get_doc` or `update_doc` tools. While the impact is limited to files with a `.md` extension (enforced by the code), an attacker can successfully read or overwrite any existing Markdown file on the host filesystem that the process has permissions to access. This can be triggered directly by an MCP client or indirectly through prompt injection against an AI agent integrated with the tool.
Affected products
- knowns-dev knowns <= 0.11.4
Timeline
- 2026-02-12: other: Vulnerability discovered and PoC created
- 2026-07-21: disclosed: CVE-2026-30633 published