CVE-2026-82233: SiYuan before v3.8.1 contains a path traversal vulnerability in the asset.upload MCP tool that accepts arbitrary absolut
mediumvulnerability
security
Summary
SiYuan versions before v3.8.1 have a path traversal vulnerability (a flaw that lets attackers access files outside their intended directory) in the asset.upload tool that doesn't check if file paths are within the workspace boundary. An attacker can use prompt injection (tricking an AI by hiding instructions in its input) to make an AI Agent upload sensitive files like SSH keys or credentials from anywhere on the system into the asset directory.
Solution / Mitigation
Update SiYuan to v3.8.1 or later.
Vulnerability Details
CVSS Score
5.7(medium)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Attack Vector
network
Attack Complexity
low
Privileges Required
low
User Interaction
required
Disclosure Date
August 28, 2026
Classification
Attack Type
Prompt InjectionRAG Poisoning
Attack SophisticationModerate
Impact (CIA+S)
confidentiality
Taxonomy References
Affected Vendors
Related Issues
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82233
First tracked: August 28, 2026 at 02:08 PM
Classified by LLM (prompt v3) · confidence: 85%