CVE-2026-88938: knowns through 0.33.0 fails to confine the path argument of the code.find MCP tool to the project root, allowing AI agen

A vulnerability in knowns version 0.33.0 and earlier fails to properly restrict file access in the code.find MCP tool (a tool that helps AI agents find code). This allows attackers to read source files from anywhere on the computer by using absolute paths or relative path traversal sequences (tricks like "../" to go up directories), rather than limiting access to just the intended project folder.