# CVE-2026-88937: knowns path traversal in code generation template engine

Source: https://junglewise.ai/threats/cve-2026-88937-knowns-path-traversal-in-code-generation-template-engine  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-10. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-88937 · Severity: high · CVSS 8.8 · Published 2026-09-10

knowns is a code generation tool that uses templates to create project files. A flaw in template path validation allows attackers to supply malicious templates that write files outside the intended project directory—such as shell configuration files or credentials—leading to data theft or persistent code execution on a developer's machine.

Technologies: [Knowns-Dev Knowns](https://junglewise.ai/threats/technologies/knowns). Vendors: [Knowns-Dev](https://junglewise.ai/threats/vendors/knowns-dev).

## Quick answers

**Is CVE-2026-88937 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-88937 being exploited in the wild.

**How severe is CVE-2026-88937?** High severity, with a CVSS score of 8.8, published 10 September 2026.

**Which products and versions are affected?** Knowns-Dev Knowns through 0.33.0.

**Is there a fix for CVE-2026-88937?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-88937 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-88937?** Check whether you run Knowns-Dev Knowns at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The template engine in knowns through version 0.33.0 fails to properly validate destination paths in code generation templates, enabling directory traversal attacks. The vulnerable component is in internal/codegen/template_engine.go. An attacker can craft a malicious template with path traversal sequences (e.g., ../../../) to write arbitrary files to locations outside the project root, including user home directories. No authentication or special privileges are required—an attacker simply needs to convince a developer to use a malicious template. This can result in overwriting shell profiles (.bashrc, .zshrc), stealing SSH keys or credentials, or achieving persistent code execution. A patch is expected in version 0.33.1 or later.

## Affected products

- knowns-dev knowns through 0.33.0

## Timeline

- 2026-09-10: disclosed

## References

- [https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/codegen/template_engine.go](https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/codegen/template_engine.go)
- [https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/codegen/template_engine.go](https://github.com/knowns-dev/knowns/blob/v0.33.0/internal/codegen/template_engine.go)

## Related threats

- [Knowns path traversal in workspace browse endpoint](https://junglewise.ai/threats/cve-2026-88940-knowns-path-traversal-in-workspace-browse-endpoint)
- [knowns path traversal in code.find MCP tool](https://junglewise.ai/threats/cve-2026-88938-knowns-path-traversal-in-code-find-mcp-tool)
- [Knowns path traversal in /api/opencode proxy endpoint](https://junglewise.ai/threats/cve-2026-88899-knowns-path-traversal-in-api-opencode-proxy-endpoint)
- [knowns path traversal in Document API](https://junglewise.ai/threats/cve-2026-86775-knowns-path-traversal-in-document-api)
- [knowns command injection in LSP binary configuration](https://junglewise.ai/threats/duplicate-advisory-knowns-vulnerable-to-command-injection-3c0a4ee5)