Is CVE-2026-86541 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-86541 being exploited in the wild.

How severe is CVE-2026-86541?

High severity, with a CVSS score of 8.3, published 7 September 2026.

Is there a fix for CVE-2026-86541?

A patch was published on 2026-08-16: Security fix merged in commit a2c98fc (fix: guard code mutations) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-86541 attacked?

It is attacked over the network.

Am I affected by CVE-2026-86541?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-86541: Knowns path traversal in handleCodeReplace function

CVE-2026-86541 · Severity: high · CVSS 8.3 · Published 2026-09-07

Knowns is a code collaboration and editing tool. Versions before 0.30.0 contain a path traversal vulnerability in the code replacement handler that allows attackers to write malicious content to arbitrary files outside the project directory, such as shell startup scripts or SSH configuration files, potentially gaining unauthorized system access or persistence.

Quick answers

Is CVE-2026-86541 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-86541 being exploited in the wild.
How severe is CVE-2026-86541?: High severity, with a CVSS score of 8.3, published 7 September 2026.
Which products and versions are affected?: Knowns Knowns before 0.30.0.
Is there a fix for CVE-2026-86541?: A patch was published on 2026-08-16: Security fix merged in commit a2c98fc (fix: guard code mutations) Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-86541 attacked?: It is attacked over the network.
Am I affected by CVE-2026-86541?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the handleCodeReplace() function and allows path traversal attacks through insufficiently validated file paths. Attackers can supply absolute paths or paths containing directory traversal sequences (e.g., "../") to write files outside the intended project root. The vulnerability requires network access to the Knowns instance and the ability to invoke the code replacement function. An attacker can achieve arbitrary file write, potentially leading to code execution or system compromise. A fix was merged in commit a2c98fc and is expected to be available in version 0.30.0 or later.

Affected products

Knowns Knowns before 0.30.0

Timeline

2026-09-07: disclosed: CVE-2026-86541 published
2026-08-16: patched: Security fix merged in commit a2c98fc (fix: guard code mutations)

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.