Directory Traversal in Knowns 0.11.4 via create_doc Tool

Executive Summary

CVE-2026-30632 is a path traversal vulnerability in the knowns MCP server's create_doc tool affecting versions up to v0.11.4. It allows attackers to write .md files and create directories outside the intended .knowns/docs/ directory by exploiting insufficient sanitization of the folder parameter. The file extension is hardcoded to .md, but path traversal can still escape the intended directory structure.

Useful 0 Not Useful 0

Detection Guidance

To detect CVE-2026-30632, monitor for unexpected .md file creation outside the intended .knowns/docs/ directory. Check system logs for file writes in unusual locations like /tmp/ or project root directories. Inspect MCP server logs for create_doc tool usage with suspicious folder parameters containing path traversal sequences like ../.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow attackers to create arbitrary directories and write .md files outside the intended project directory. It can be exploited through direct MCP client access or prompt injection in AI agents. Attackers could chain this with the set_project tool to hijack the project root, potentially affecting system-wide locations like /tmp.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows attackers to write files and create directories outside intended locations, potentially violating data integrity and access control requirements in GDPR and HIPAA. Unauthorized file creation could expose sensitive data or system files, leading to non-compliance with data protection and security standards.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update knowns to a version beyond v0.11.4. Validate the folder parameter in create_doc by resolving the full path and ensuring it stays within the intended base directory. Restrict MCP client access and AI agent integrations to prevent prompt injection exploits.

Useful 0 Not Useful 0