PT-2026-79543 · Siyuan · Siyuan
CVSS v4.0
6.9
Medium
| Vector | AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
SiYuan versions prior to 3.8.0
Description
An incomplete path blocklist in the MCP file tool fails to restrict access to sensitive workspace files protected by the HTTP API. This allows authenticated administrators to read plaintext publish-mode passwords from the
data/.siyuan/publishAccess.json file and access other sensitive files, including data/templates and data/snippets/conf.json.Recommendations
Update to version 3.8.0 or later.
Exploit
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Siyuan