CVE-2026-116168GHSA-q768-4j87-gf3w

SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool

siyuan-note siyuan

Open in Threatline Record JSON

CVSS

6.9Medium

ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV

Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet

Fixed in3.8.7Fixed versionCVE List

Published25 Oct 2026Updated 25 Oct 2026CVE List

What fixes it

3.8.7siyuanCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

🚨 CVE-2026-116168 SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relies on an incomplete sensitive-path blacklist that omits .env anTelegram: CVE Notify, 25 Oct 2026

Description

SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relies on an incomplete sensitive-path blacklist that omits .env and other secret files. Authenticated attackers driving the MCP asset upload action can copy such local files into the workspace and read them back via /assets/ over HTTP.

Text from CVE List

Affected versions 2

siyuanaffected: all versions before 3.8.7CVE List
siyuanunaffected: 3.8.7CVE List