{"data":{"id":"31f2376c-3826-47f7-86c7-a816d032db53","title":"CVE-2026-82233: SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolut","summary":"SiYuan versions before v3.8.1 have a path traversal vulnerability (a flaw that lets attackers access files outside their intended directory) in the asset.upload tool that doesn't check if file paths are within the workspace boundary. An attacker can use prompt injection (tricking an AI by hiding instructions in its input) to make an AI Agent upload sensitive files like SSH keys or credentials from anywhere on the system into the asset directory.","solution":"Update SiYuan to v3.8.1 or later.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82233","publishedAt":"2026-08-28T12:16:32.953Z","cveId":"CVE-2026-82233","cweIds":["CWE-22"],"cvssScore":"5.7","cvssSeverity":"medium","severity":"medium","attackType":["prompt_injection","rag_poisoning"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["SiYuan"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-28T12:16:32.953Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0020","AML.T0051","AML.T0051.001"]}}