{"id":"GHSA-x8gv-g2g3-65fj","kind":"vulnerability","aliases":["GHSA-x8gv-g2g3-65fj","GO-2026-6657"],"related":[],"title":"SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF) in github.com/siyuan-note/siyuan/kernel","description":"SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF) in github.com/siyuan-note/siyuan/kernel","summary":"SiYuan's Agent Tools in the kernel package have an SSRF flaw: a DNS-rebinding time-of-check/time-of-use race lets a request bypass the CheckHostSSRF host check. An attacker can make the server reach internal hosts it should not contact.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"github.com/siyuan-note/siyuan/kernel","fixed":["0.0.0-20260813142806-dd2778b70d02"],"affected":"< 0.0.0-20260813142806-dd2778b70d02","ecosystem":"go"}],"ecosystems":["go"],"tags":["agent-tools","go","package","self-hosted","siyuan"],"not_affected_if":["unknown"],"how_to_check":"Run go list -m github.com/siyuan-note/siyuan/kernel to see the pinned pseudo-version.","fix":"Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260813142806-dd2778b70d02 or later.","status":"open","published_at":"2026-10-07T14:10:14+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","triaged_at":"2026-10-23T20:20:13+00:00","updated_at":"2026-10-23T20:20:13+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-23T20:20:13Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade github.com/siyuan-note/siyuan/kernel to 0.0.0-20260813142806-dd2778b70d02 or later.","summary":"SiYuan's Agent Tools in the kernel package have an SSRF flaw: a DNS-rebinding time-of-check/time-of-use race lets a request bypass the CheckHostSSRF host check. An attacker can make the server reach internal hosts it should not contact.","category":"package","who_cares":["go","siyuan","self-hosted","agent-tools"],"confidence":0.6,"analyst_note":"Sources give only the title and affected/fixed versions; check https://pkg.go.dev/vuln/GO-2026-6657 and GHSA-x8gv-g2g3-65fj for severity, exploit conditions and whether Agent Tools is reachable by untrusted input.","how_to_check":"Run go list -m github.com/siyuan-note/siyuan/kernel to see the pinned pseudo-version.\nunknown","needs_analyst":true,"not_affected_if":["unknown"],"severity_if_unknown":"unknown"},"cost_usd":0.000401,"input_tokens":2098,"output_tokens":383,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':23A '-6657':24A '/siyuan-note/siyuan/kernel':16A,32A,100C '/time-of-use':62B '65fj':21A,29A 'agent':2A,34B,44B,86C 'agent-tool':33B 'attack':73B 'bypass':10A,67B,94C 'check':61B,71B 'checkhostssrf':12A,69B,96C 'contact':84B 'dns':7A,56B,91C 'dns-rebind':6A,55B,90C 'flaw':53B 'g2g3':20A,28A 'ghsa':18A,26A 'ghsa-x8gv-g2g3-65fj':17A,25A 'github.com':15A,31A,99C 'github.com/siyuan-note/siyuan/kernel':14A,30A,98C 'go':22A,36B 'host':40B,70B,80B 'intern':79B 'kernel':48B 'let':64B 'make':75B 'packag':37B,49B 'race':63B 'reach':78B 'rebind':8A,57B,92C 'request':66B 'self':39B 'self-host':38B 'server':77B 'siyuan':1A,41B,42B,85C 'ssrf':4A,52B,88C 'time':59B 'time-of-check':58B 'toctou':9A,93C 'tool':3A,35B,45B,87C 'via':5A,89C 'x8gv':19A,27A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-07T14:10:14+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"govuln","external_id":"GO-2026-6657","url":"https://pkg.go.dev/vuln/GO-2026-6657","severity":null,"published_at":"2026-10-07T14:10:14+00:00","modified_at":"2026-10-07T14:10:14+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","fetched_at":"2026-10-23T19:13:08+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}