Vulnerability · Published Aug 22, 2026 · Assigned by VulnCheck

CVE-2026-60083SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

Medium 4.9

In plain English

A medium-severity incorrect authorization in siyuan from siyuan-note. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.9Medium

Exploit odds (30 days)0.4%top 66.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access other sensitive files like data/templates and data/snippets/conf.json.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/siyuan-note/siyuan/kernel	0.0.0-20260808051406-3542530c505f	GHSA-c8r8-95hg-mp34
Go	github.com/siyuan-note/siyuan/kernel	0.0.0-20260808051406-3542530c505f	GO-2026-6863

Affected products (as reported)

Vendor	Product	Versions
siyuan-note	siyuan	0 – before 3.8.0

Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

References

GitHub Security Advisory (GHSA-c8r8-95hg-mp34) vendor-advisory
VulnCheck Advisory: SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool third-party-advisory