Medium severity5.7NVD Advisory· Published Aug 28, 2026

CVE-2026-82233

Description

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into the asset directory through prompt injection.

Affected products

Siyuan Note/Siyuanllm-fuzzy
Range: <3.8.1

Patches

Vulnerability mechanics

References

github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8nvd
www.vulncheck.com/advisories/siyuan-before-3.8.1-path-traversal-via-asset-uploadnvd

News mentions

No linked articles in our index yet.

cvss	0.371
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000