---
id: "GHSA-p23f-cm6q-2qp8"
kind: "vulnerability"
aliases: ["GHSA-p23f-cm6q-2qp8", "GO-2026-6655"]
title: "SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "ai-tooling"
products: [{"name": "github.com/siyuan-note/siyuan/kernel", "fixed": ["0.0.0-20260813142104-b26a4a307b8a"], "affected": "< 0.0.0-20260813142104-b26a4a307b8a", "ecosystem": "go"}]
ecosystems: ["go"]
tags: ["ai-tooling", "go", "mcp", "self-hosted", "siyuan"]
not_affected_if: ["managed-hosting", "mcp-disabled"]
published_at: "2026-10-07T14:10:14+00:00"
first_seen_at: "2026-10-23T19:13:08+00:00"
updated_at: "2026-10-23T20:57:05+00:00"
sources: [{"source": "govuln", "url": "https://pkg.go.dev/vuln/GO-2026-6655", "first_seen_at": "2026-10-23T19:13:08+00:00"}]
---

# SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel

The SiYuan kernel's MCP asset.upload tool accepts absolute file paths without restricting them to the workspace. An attacker who can call that tool can read arbitrary files the SiYuan process can access on the host.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- go:github.com/siyuan-note/siyuan/kernel affected < 0.0.0-20260813142104-b26a4a307b8a fixed 0.0.0-20260813142104-b26a4a307b8a

## How to check

Run go list -m github.com/siyuan-note/siyuan/kernel in the project that builds SiYuan and compare the version to 0.0.0-20260813142104-b26a4a307b8a. Check whether the MCP server is enabled in the SiYuan deployment.

## Fix

Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260813142104-b26a4a307b8a or later. Restrict MCP access until the upgrade is done.

## Timeline

- 2026-10-23T19:13:08+00:00 govuln https://pkg.go.dev/vuln/GO-2026-6655

## From the sources

SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) in github.com/siyuan-note/siyuan/kernel

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_