CVE-2026-60083 describes an incorrect authorization vulnerability in SiYuan note-taking software prior to version 3.8.0. The MCP file tool's path blocklist is incomplete, allowing authenticated administrators to bypass intended access restrictions on sensitive workspace files. Specifically, attackers with administrative privileges can read plaintext passwords stored in data/.siyuan/publishAccess.json and access other sensitive files such as data/templates and data/snippets/conf.json through the HTTP API. This vulnerability does not require user interaction and has a CVSS 4.0 base score of 6.9, indicating a medium severity level.

The vulnerability allows authenticated administrators to access sensitive files that should be protected, including plaintext publish-mode passwords and configuration files. This exposure could lead to unauthorized disclosure of credentials and configuration data, potentially facilitating further unauthorized actions within the affected environment. However, exploitation requires administrative privileges, limiting the scope of impact to users who already have elevated access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor vendor communications for updates. Until a fix is available, restrict administrative access to trusted personnel only and consider additional access controls to sensitive files.