Description
SiYuan before 3.8.7 contains a path traversal vulnerability in the MCP asset tool because validateAssetUploadPaths relies on an incomplete sensitive-path blacklist that omits .env and other secret files. Authenticated attackers driving the MCP asset upload action can copy such local files into the workspace and read them back via /assets/ over HTTP.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| siyuan-note | siyuan | < 3.8.7 | 3.8.7 |
References
- GitHub Security Advisory (GHSA-q768-4j87-gf3w) vendor-advisory
- VulnCheck Advisory: SiYuan before v3.8.7 Path Traversal Local File Read via MCP Asset Tool third-party-advisory