cve.bz

CVE-2026-82233

6.9 mediumEPSS 0.4%

Medium (6.9). EPSS 0.4% chance of exploitation in the next 30 days. Fixed in github.com/siyuan-note/siyuan/kernel 0.0.0-20260813142104-b26a4a307b8a.

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into the asset directory through prompt injection.

Severity

CVSS 4.0

6.9 medium
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

5.7 medium
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
EPSS
0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE
CWE-22
Published
Modified
Record from
the NVD, synced

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-p23f-cm6q-2qp8Gogithub.com/siyuan-note/siyuan/kernel<0.0.0-20260813142104-b26a4a307b8a0.0.0-20260813142104-b26a4a307b8a
GO-2026-6655Gogithub.com/siyuan-note/siyuan/kernel<0.0.0-20260813142104-b26a4a307b8a0.0.0-20260813142104-b26a4a307b8a

References

Check your stackJSON