CVE-2026-82233: SiYuan before v3.8.1 Path Traversal via asset.upload

Severity: medium (CVSS 5.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-28 · updated 2026-08-31
Weakness: CWE-22

Description

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into the asset directory through prompt injection.

Affected products

Go Github.Com/Siyuan-Note/Siyuan/Kernel: before 0.0.0-20260813142104-b26a4a307b8a — fixed in 0.0.0-20260813142104-b26a4a307b8a
siyuan-note siyuan: before 3.8.1 — fixed in 3.8.1

How to fix

Upgrade to a fixed version: Go Github.Com/Siyuan-Note/Siyuan/Kernel 0.0.0-20260813142104-b26a4a307b8a; siyuan-note siyuan 3.8.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-82233 or the next vulnerability affects your stack