Medium severity6.2NVD Advisory· Published Oct 25, 2026· Updated Oct 25, 2026

CVE-2026-116168

Description

SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relies on an incomplete sensitive-path blacklist that omits .env and other secret files. Authenticated attackers driving the MCP asset upload action can copy such local files into the workspace and read them back via /assets/ over HTTP.

Affected products

Siyuan Note/Siyuanllm-fuzzy
Range: <3.8.7

Patches

Vulnerability mechanics

References

github.com/siyuan-note/siyuan/security/advisories/GHSA-q768-4j87-gf3wnvd
www.vulncheck.com/advisories/siyuan-before-3.8.7-path-traversal-local-file-read-via-mcp-asset-toolnvd

News mentions

No linked articles in our index yet.

cvss	0.403
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000