Live › vulnerability › GHSA-p23f-cm6q-2qp8
Go to dashboardThe SiYuan kernel's MCP asset.upload tool accepts absolute file paths without restricting them to the workspace. An attacker who can call that tool can read arbitrary files the SiYuan process can access on the host.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:13 UTC. All times on this page are UTC.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| github.com/siyuan-note/siyuan/kernel | go | < 0.0.0-20260813142104-b26a4a307b8a | 0.0.0-20260813142104-b26a4a307b8a |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel
This page as .md · .json · in your agent: get_signal("GHSA-p23f-cm6q-2qp8")
Go Vulnerability Database, CC-BY 4.0. Posts quoted belong to their authors.