SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass)
# Security Advisory — SiYuan MCP `asset.upload` Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) | Field
#go
共收录 737 条相关情报。
← 返回所有主题SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers
CVE-2026-74904
Same CWE-862 family, found via an automated bulk sweep of every `/api/block/*` handler in `kernel/api/block.go` for the
SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass
CVE-2026-74802
**High** ## Package gomod `github.com/siyuan-note/siyuan/kernel` ## Affected versions 3.7.3 ## Patched versions *(non
Xray-core: Pinning a CA certificate via pinnedPeerCertSha256 can lead to the success of MITM attacks
### Summary Pinning a CA certificate via `pinnedPeerCertSha256` can lead to the success of MITM attacks in some cases.
SiYuan: The reference filter for getRefIDs checks visibility but not the password tier, disclosing that password-protected documents reference a given block
CVE-2026-73606
### Summary `/api/block/getRefIDs` filters its results for reader roles through a helper that checks only the visibilit
SiYuan: getAttributeViewSearchTarget returns database row content to anonymous readers with no publish-access check, reopening the class closed one day earlier at the adjacent r...
### Scope note This endpoint does not exist in v3.7.3 or on master. It was introduced on the development branch by comm
SiYuan: getBookmarkLabels returns every bookmark label in the workspace to anonymous readers, with no publish-access filtering
CVE-2026-73609
### Summary `/api/attr/getBookmarkLabels` is registered with `CheckAuth` only and applies no filtering of any kind. It
SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem
CVE-2026-73605
### Summary `/api/file/getUniqueFilename` takes a path from the request body and passes it to a filesystem existence ch
SiYuan: Outline state for any document, including documents forbidden to readers, is returned by /api/storage/getOutlineStorage with no access check
CVE-2026-73607
### Summary `/api/storage/getOutlineStorage` is registered with `CheckAuth` only and performs no authorization of any k
Containerd has image-pull DoS via crafted OCI index graph amplification
CVE-2026-53493
### Impact A vulnerability exists in containerd's image pull handlers where a crafted OCI image index containing deeply
Podman: Malformed Image can trick podman run into leaking host environment variables into the container
CVE-2026-57231
## Summary An container image that contains a environment variable with just a key and no value can trick podman into p
Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces
CVE-2026-56742
### Impact In Cilium clusters using [Gateway API](https://docs.cilium.io/en/stable/network/servicemesh/gateway-api/gate
ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass
CVE-2026-61604
Impact Type: Improper authorization leading to unauthorized movement of user funds. The x/bonds module moved funds
Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS
CVE-2026-82407
**Location:** `core/kapp/validators/validators.go:201` (`Register`), (`genesis/checking/nodesSetupChecker.go:73`). `core
Klever-Go: Elasticsearch bulk / painless injection via on-chain account name -> explorer/indexer data forgery
CVE-2026-82409
**Component:** Elasticsearch indexer (`indexer/`) **Primary location:** `indexer/common.go:2395-2407` (`serializedDataFo
Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace
CVE-2026-82406
**Location:** `core/kapp/market/market.go` — `Buy()` (approx. L281–436)\ **Severity:** High The native marketplace enfo
Klever-Go Account takeover: `kleverUpdateAccountPermission` authorizes on attacker-controlled `RecipientAddr` instead of the authenticated caller
CVE-2026-82405
### Description The VM built-in function `KleverUpdateAccountPermission` (registered always-active, `creator.go:381-390
Klever-Go: Unauthenticated WebSocket /subscribe: no read-size limit, no connection cap, permissive origin -> remote node memory/goroutine exhaustion (DoS)
CVE-2026-86065
## Summary The unauthenticated WebSocket endpoint `GET /subscribe` is registered `open: true` by default (`config/node/a
Klever-Go: /log controls global node logging
CVE-2026-86064
An unauthenticated client can connect to `GET /log`, send an arbitrary logger profile as the first WebSocket message, an
Traefik: BasicAuth singleflight coalescing reintroduces an unauthenticated username-enumeration timing oracle
CVE-2026-88010
## Summary Traefik's BasicAuth middleware coalesces concurrent credential checks through a `singleflight.Group` to avoi