Description
Verified. Multiple Unrestricted Path Traversal vulnerabilities exist in the Knowns MCP docs and memory tools, allowing arbitrary file read, write, and deletion operations outside the project sandbox. The storage layer functions (Get, Create, Update, Rename, Delete) in both doc_store.go and memory_store.go concatenate user-controlled paths with filepath.Join() without any containment validation.
Recommendation
Update the knowns package to the latest compatible version. Followings are version details:
- Affected version(s): <= 0.29.1
- Patched version(s): 0.30.0
References
Could your website be exposed too?
SmartScanner can check your website for Knowns Unrestricted Path Traversal leading to out-of-bounds arbitrary .md file read, write, and deletion in MCP Docs + M and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Saltcorn has an Unauthenticated Path Traversal in sync endpoints, allowing arbitrary file write and directory read - CVE-2026-40163
- SillyTavern has a path traversal in `/api/chats/import` allows arbitrary file write outside intended chat directory - CVE-2026-34522
- SillyTavern: Path Traversal in `/api/chats/export` and `/api/chats/delete` allows arbitrary file read/delete within user - CVE-2026-34524
- Rollup 4 has Arbitrary File Write via Path Traversal - CVE-2026-27606
You might also like:
See something that needs correcting? Let us knowUpdated September 25, 2026