KN
Product
knowns
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 9Medium 2Low 0
Watch
Add knowns to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-88899 | 9.8 | Sep 10 | knowns before 0.31.0 External Control of Agent Working Directory via x-opencode-directory Header Affected: before 0.31.0 |
| CVE-2026-86543 | 9.8 | Sep 7 | knowns before 0.30.0 Unauthenticated Management API Exposure Affected: before 0.30.0 |
| CVE-2026-86542 | 9.1 | Sep 7 | knowns before 0.30.0 Path Traversal via Import Name Affected: before 0.30.0 |
| CVE-2026-88937 | 8.8 | Sep 10 | knowns through 0.33.0 Path Traversal via Template Engine Affected: through 0.33.0 |
| CVE-2026-86439 | 8.8 | Sep 7 | knowns before 0.30.0 Path Traversal via MCP doc and memory tools Affected: before 0.30.0 |
| CVE-2026-86775 | 8.6 | Sep 9 | knowns before 0.30.0 Path Traversal via Document API Affected: before 0.30.0 |
| CVE-2026-88939 | 8.3 | Sep 10 | knowns through 0.33.0 Authorization Bypass via project.set Bootstrap Exemption Affected: through 0.33.0 |
| CVE-2026-86541 | 8.3 | Sep 7 | knowns before 0.30.0 Path Traversal via code.replace MCP action Affected: before 0.30.0 |
| CVE-2026-86544 | 8.1 | Sep 7 | knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions Affected: before 0.30.0 |
| CVE-2026-86540 | 7.8 | Sep 7 | knowns before 0.30.0 Arbitrary Code Execution via LSP Binary Affected: before 0.30.0 |
| CVE-2026-86538 | 7.5 | Sep 7 | knowns before 0.30.0 Path Traversal via templateFile parameter Affected: before 0.30.0 |
| CVE-2026-86539 | 7.2 | Sep 7 | knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint Affected: through 0.33.0 |
| CVE-2026-88938 | 6.5 | Sep 10 | knowns through 0.33.0 Path Traversal via code.find MCP tool Affected: through 0.33.0 |
| CVE-2026-88940 | 5.3 | Sep 10 | knowns through 0.33.0 Arbitrary Directory Enumeration via workspace browse endpoint Affected: through 0.33.0 |
Showing 14
