CVE-2026-82650

Name of the Vulnerable Software and Affected Versions SiYuan version 3.8.0

Description An authenticated attacker can exploit a path traversal and sensitive file exposure issue through the RenderTemplate() function. This is reachable via the 'POST /api/template/render' endpoint. While the system restricts paths to the workspace directory using util.IsAbsPathInWorkspace, it fails to apply a sensitive-path exclusion blocklist. This allows the unauthorized reading of sensitive workspace files, such as conf/conf.json, which stores the API token and cookie signing key.

Recommendations Update SiYuan to version 3.8.1.