Threats Tagged 'ghsa-gwmf-gvp9-fcc2'

1 threat

Threats Tagged 'ghsa-gwmf-gvp9-fcc2'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.6%	CVE-2026-85580siyuan · Path Traversal High7.1EPSS 0.6%2026-09-04CVE Database V5CVE-2026-85580 SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive publish-access configuration and metadata. EPSS 0.6%Vulnerability siyuan-note #ghsa-gwmf-gvp9-fcc2	CVE Database V5	2026-09-04

Showing 1–1 of 1 result