CVE-2026-88899
knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header
CVSS 4.0 9.3 CRITICALCVSS 3.1 9.8 CRITICALCheck source for fixed versionsKEV status unknown
cve-program · CVE-2026-88899
Publishedknowns versions before 0.31.0 fail to properly validate the x-opencode-directory request header in the /api/opencode proxy endpoint. Remote attackers can supply arbitrary directory paths to execute file operations outside the project root on the host system.
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-88899 · CVE overview and exploitation status
cve-program · CVE-2026-88899
- https://github.com/knowns-dev/knowns/security/advisories/GHSA-9h2q-r9fh-f98w
- https://github.com/knowns-dev/knowns/blob/v0.30.0/internal/server/server.go#L1283-L1296
- https://github.com/knowns-dev/knowns/commit/37db0561b37b48b8bd035a417d7f1da6258ae657
- https://github.com/knowns-dev/knowns/releases/tag/v0.31.0
- https://www.vulncheck.com/advisories/knowns-before-0.31.0-external-control-of-agent-working-directory-via-x-opencode-directory-header
Related changes
Linked by CVE identifierNo related changes are available here.