CVE-2026-85583 — SiYuan before v3.8.2 Path Traversal via symlink in file API
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attac…
Published: 2026-09-04 · CVSS: 7.1 · CVSS 4.0
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the reader-accessible file-read endpoint that follows symlinks when opening authorized asset paths. Attackers with reader role can request a logical asset under data/assets/ that is a symlink to a file outside the workspace and receive the target file bytes, bypassing workspace boundary restrictions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7