CVE-2026-59854 SiYuan: Incomplete IsSensitivePath denylist: globalCopyFiles reads home-dir credential dotfiles into the workspace
An authenticated user can copy sensitive home-directory credential files into the workspace via an incomplete path denylist, leading to credential exposure.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-59854?
CVE-2026-59854 is a medium-severity path traversal vulnerability in siyuan-note siyuan, published on 9 Jul 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacker-supplied absolute source paths and relies on util.IsSensitivePath in kernel/util/path.go, whose denylist misses common home-directory credential files such as .git-credentials, .netrc, .pgpass, .kube/config, .docker/config.json, and .gnupg, allowing an authenticated administrator or API-token user to copy those files into the workspace and exfiltrate them through the file API. This issue is fixed in versions 3.7.1-alpha.2 and 3.7.1.
Weakness: CWE-693
Which versions are affected by CVE-2026-59854?
How do I fix CVE-2026-59854?
No fix has been published for CVE-2026-59854 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2026-59854 being exploited?
There is no known exploitation of CVE-2026-59854 in the wild and no public exploit code.
Sources
Also known as GHSA-vmm8-3ccv-ppvw.