Medium 6.9

SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool

CVE-2026-116168 First seen on SecPulse Oct 25, 22:20

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
siyuan-note	siyuan-notesiyuan	< 3.8.7→ 3.8.7	3.8.7

Original description The description as published by the source.

SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relies on an incomplete sensitive-path blacklist that omits .env and other secret files. Authenticated attackers driving the MCP asset upload action can copy such local files into the workspace and read them back via /assets/ over HTTP.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.2; CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4: Medium 6.9; CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Published: Oct 25, 2026
First seen on SecPulse: Oct 25, 22:20
GHSA: GHSA-q768-4j87-gf3w
CWE: CWE-22

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Path Traversal

CWE

CWE-22

All

Siyuan Note Siyuan

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 27, 11:46
NIST National Vulnerability DatabaseNov 5, 01:17
GitHub Security Advisories (Global)Oct 26, 00:32
CVE.org (CVE Program・cvelistV5)Nov 5, 01:06