ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-86541

knowns before 0.30.0 Path Traversal via code.replace MCP action

CVSS 4.0 7.2 HIGHCVSS 3.1 8.3 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-86541

Published

knowns versions before 0.30.0 contain a path traversal vulnerability in the handleCodeReplace() function that allows attackers to overwrite arbitrary files outside the project root. Attackers can supply absolute paths or relative paths containing directory traversal sequences to write malicious content to sensitive files like shell startup scripts or SSH configuration files.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-86541

Published

knowns

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "knowns-dev",
                    "product": "knowns",
                    "defaultStatus": "unaffected",
                    "packageURL": "pkg:npm/knowns",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "0.30.0"
                        },
                        {
                            "version": "0.30.0",
                            "status": "unaffected",
                            "versionType": "semver"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON