CVE-2026-82233CWE-22path-traversal

CVE-2026-82233

Medium · published August 28, 2026

CVSS v3.1
5.7
EPSS
0%
Percentile
33.3
In the wild
Unconfirmed
What it is

SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolute file paths without workspace boundary validation. Attackers can induce the AI Agent to upload sensitive files such as SSH keys or credentials from outside the workspace into the asset directory through prompt injection.

The record
Technical detail
CVSS v3.1
5.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00402 · 33.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-28T16:16Z
References (3)
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8 · [email protected]https://www.vulncheck.com/advisories/siyuan-before-3.8.1-path-traversal-via-asset-upload · [email protected]https://github.com/siyuan-note/siyuan/security/advisories/GHSA-p23f-cm6q-2qp8 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 30 AUG 16:19Z
    EPSS moved — → 0%
    epss
  • 28 AUG 10:49Z
    SiYuan before v3.8.1 Path Traversal via asset.upload
    cvelistv5