CVE-2026-85580 — SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch
SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read…
Published: 2026-09-04 · CVSS: 7.1 · CVSS 4.0
SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive publish-access configuration and metadata.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7