CVE-2026-88937
Received Received - Intake

Template Path Traversal in Known Template Engine

Publication date: 2026-09-10

Last updated on: 2026-09-10

Assigner: VulnCheck

Description
knowns through 0.33.0 fails to properly validate template destination paths in the code generation template engine, allowing attackers to read and write arbitrary files outside the project root. Attackers can supply malicious templates that traverse directories to overwrite shell profiles, steal credentials, or achieve persistent code execution on victim systems.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-10
Last Modified
2026-09-10
Generated
2026-09-10
AI Q&A
2026-09-10
EPSS Evaluated
N/A
NVD
CVE-2026-88937
EUVD
EUVD-2026-75580

Affected Vendors & Products

Showing 3 associated CPEs
Vendor Product Version / Range
knowns knowns to 0.33.0 (inc)
knowns knowns to 0.32.0 (exc)
knowns knowns to 0.32.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-22 The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-88937 is a path traversal vulnerability in the knowns software versions up to 0.33.0. It exists in the template engine's code generation component where improper validation of template destination paths allows attackers to read and write arbitrary files outside the intended project directory. Attackers can exploit this by supplying malicious templates that traverse directories, potentially overwriting system files, stealing credentials, or achieving persistent code execution.

Detection Guidance

Check if you are running knowns versions up to 0.33.0. Inspect template files for malicious paths or directory traversal sequences like ../. Run commands such as 'knowns version' to verify installed version. Monitor file system changes in sensitive directories like ~/.bashrc, ~/.ssh/authorized_keys, or /etc/cron.d.

Impact Analysis

This vulnerability can allow attackers to overwrite critical system files like shell profiles, steal sensitive credentials, or establish persistent code execution on your system. It can be triggered remotely by importing a malicious template repository and running it, giving attackers full user privileges without requiring local access.

Compliance Impact

This vulnerability can lead to unauthorized access to sensitive data, including credentials and system files, which may violate compliance requirements under GDPR (data protection) and HIPAA (health information privacy). Unauthorized file access or code execution could result in data breaches, non-compliance penalties, and loss of trust.

Mitigation Strategies

Upgrade knowns to version 0.34.0 or later immediately. Remove any untrusted template repositories. Review and restore any modified system files. Disable automatic template execution until patched. Monitor for signs of compromise like unexpected file changes or unauthorized access.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-88937. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart