01 Record

CVE-2026-60083

SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

MediumPUBLISHEDCNA: VulnCheck

Base score6.9 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

02 Description

SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file tool

Published

2026-08-22 12:26Z2 HR AGO

Last updated

2026-08-22 12:26Z2 HR AGO

Reserved

2026-07-08

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

Medium (CVSS 6.9)

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

ed0ea1af6e97e6ec7b44f9375640bf99c01d9f8aeff1c7bb00c514511ac23fc7

VendorProductVersionsPlatforms

siyuan-notesiyuan0 to < 3.8.0—

github.comGitHub Security Advisory (GHSA-c8r8-95hg-mp34)https://github.com/siyuan-note/siyuan/security/advisories/GHSA-c8r8-95hg-mp34vendor-advisory
www.vulncheck.comVulnCheck Advisory: SiYuan before v3.8.0 Incomplete Path Blocklist via MCP file toolhttps://www.vulncheck.com/advisories/siyuan-before-incomplete-path-blocklist-via-mcp-file-toolthird-party-advisory