GHSA-9GFJ-28HW-JCHP Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools

🗓️ 25 Sep 2026 19:32:05Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Path traversal in Knowns docs and memory tools allows arbitrary file read, write, and deletion.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2026-86439	8 Sep 202600:04	–	circl
CVE	CVE-2026-86439	7 Sep 202623:03	–	cve
Cvelist	CVE-2026-86439 knowns before 0.30.0 Path Traversal via MCP doc and memory tools	7 Sep 202623:03	–	cvelist
EUVD	EUVD-2026-72555	25 Sep 202619:32	–	euvd
Github Security Blog	Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools	25 Sep 202619:32	–	github
Github Security Blog	Duplicate Advisory: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools	8 Sep 202600:30	–	github
NVD	CVE-2026-86439	7 Sep 202623:16	–	nvd
Patchstack	NPM: Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + Memory Tools	25 Sep 202619:32	–	patchstack
Positive Technologies	PT-2026-86930	7 Sep 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-86439: Improper Limitation of a Pathname to a Restricted Directory	7 Sep 202600:00	–	rapid7

Source	Link
github	www.github.com/knowns-dev/knowns/security/advisories/GHSA-9gfj-28hw-jchp
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-86439
github	www.github.com/knowns-dev/knowns/commit/09c5a96fd5817b941dc86669278c1a17db10ed4e
github	www.github.com/knowns-dev/knowns
github	www.github.com/knowns-dev/knowns/blob/v0.29.1/internal/storage/doc_store.go
github	www.github.com/knowns-dev/knowns/blob/v0.29.1/internal/storage/memory_store.go
github	www.github.com/knowns-dev/knowns/releases/tag/v0.30.0
vulncheck	www.vulncheck.com/advisories/knowns-before-0.30.0-path-traversal-via-mcp-doc-and-memory-tools

25 Sep 2026 19:45Current

6Medium risk

Vulners AI Score6

CVSS 3.18.8

EPSS0.01079

Knowns path traversal doc_store.go memory_store.go file read file write file deletion