CVE-2026-60083
Received Received - Intake

SiYuan Path Traversal Vulnerability Before v3.8.0

Publication date: 2026-08-22

Last updated on: 2026-08-22

Assigner: VulnCheck

Description
SiYuan versions before v3.8.0 contain an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files protected by the HTTP API. Authenticated administrators can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and access other sensitive files like data/templates and data/snippets/conf.json.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-22
Last Modified
2026-08-22
Generated
2026-08-22
AI Q&A
2026-08-22
EPSS Evaluated
N/A
NVD
CVE-2026-60083
EUVD
EUVD-2026-64268

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
siyuan siyuan to 3.8.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SiYuan versions before v3.8.0 have an incomplete path blocklist in the MCP file tool. This flaw allows authenticated administrators to bypass access restrictions and read sensitive files like publish-mode passwords stored in data/.siyuan/publishAccess.json. The vulnerability stems from the MCP tool's resolvePath() function not blocking access to critical files such as data/templates and data/snippets/conf.json.

Detection Guidance

Check SiYuan application versions. If running versions before v3.8.0, the system is vulnerable. Inspect network traffic for unauthorized access to sensitive files like data/.siyuan/publishAccess.json, data/templates, or data/snippets/conf.json.

Impact Analysis

An attacker with administrative access could exploit this to read plaintext publish-mode passwords and access sensitive files like templates or configuration data. This could lead to unauthorized data exposure, system compromise, or further attacks leveraging exposed credentials or file contents.

Compliance Impact

This vulnerability could violate compliance requirements by exposing sensitive data such as passwords or configuration files. GDPR may require breach notification if personal data is exposed, while HIPAA could be violated if protected health information is compromised. Organizations must assess potential data exposure risks.

Mitigation Strategies

Upgrade SiYuan to v3.8.0 or later. Review file access logs for suspicious activity. Restrict administrative privileges to trusted users only. Implement additional file access controls beyond the default blocklist.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-60083. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart