Executive brief
Knowns is an AI project management system with permission controls to restrict user capabilities. A vulnerability in versions before 0.30.0 allows users granted read-only access to exploit the code.replace action to modify permission configurations and escalate their privileges to write or admin capabilities. An attacker with limited read-only access could gain unauthorized control over the system.
Technical details
The vulnerability is an authorization bypass in the permissions guard middleware. Mutating code actions, specifically code.replace, are incorrectly classified as read-only (CapRead) instead of write (CapWrite) operations in the ActionRegistry. Attackers with read-restricted sessions can call code.replace to modify permission configurations, then escalate privileges on subsequent actions. The issue is in the ActionMeta classification logic in internal/permissions/registry.go. Fix: upgrade to version 0.30.0 or later, which reclassifies code.replace as a write capability and implements stricter validation of permission-modifying operations.
Affected products
- Knowns Knowns before 0.30.0
Timeline
- 2026-09-07: disclosed