CVE-2026-82233— SiYuan before v3.8.1 Path Traversal via asset.upload
Quick assessment
Affected
siyuan-note siyuan
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SiYuan 在 v3.8.1 之前的版本中，其 asset.upload MCP 工具存在路径遍历漏洞，该工具接受任意的绝对文件路径，而未进行工作区边界校验。攻击者可通过提示词注入（prompt injection）诱导 AI Agent 将工作区之外的敏感文件（如 SSH 密钥或凭据）上传到资产目录中。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82233
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SiYuan before v3.8.1 Path Traversal via asset.upload
Source: CVE Program / CVE List V5
Vulnerability Description
SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into the asset directory through prompt injection.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| siyuan-note | siyuan | 0 ~ 3.8.1 | - |
|
II. Public POCs for CVE-2026-82233
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82233
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-82233 (2)
-
-
🔗 SiYuan before v3.8.1 Path Traversal via asset.upload | Advisories | VulnCheck third-party-advisory
IV. Related Vulnerabilities
Same product: siyuan
-
CVE-2026-82234
SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU -
CVE-2026-62204
SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install -
CVE-2026-60084
SiYuan before v3.7.4 Arbitrary File Deletion via removeTempl -
CVE-2026-60083
SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file -
CVE-2026-59809
SiYuan before v3.8.0 Secret Exfiltration via http_request UR
Same vendor: siyuan-note
-
CVE-2026-82234
SiYuan before v3.8.1 SSRF via DNS-Rebinding TOCTOU -
CVE-2026-62204
SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install -
CVE-2026-60084
SiYuan before v3.7.4 Arbitrary File Deletion via removeTempl -
CVE-2026-60083
SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file -
CVE-2026-59809
SiYuan before v3.8.0 Secret Exfiltration via http_request UR
Same weakness: CWE-22
-
CVE-2026-82112
houtini-ai houtini-lm code_task_files index.ts path traversa -
CVE-2026-82111
iswalle getnote-mcp upload_image index.ts fs.readFileSync pa -
CVE-2026-82253
gitoxide before 0.82.0 Path Traversal via Submodule Name Val -
CVE-2026-82251
gitoxide before 0.52.1 Path Traversal via Submodule Name -
CVE-2026-61800
Wazuh cluster worker file sync allows arbitrary file write u
V. Comments for CVE-2026-82233
No comments yet