6.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-33194

CVE-2026-33194: SiYuan has an Incomplete Fix for IsSensitivePath Denylist Allows File Read from /opt, /usr, /home

SiYuan is a personal knowledge management system. Prior to version 3.6.2, the IsSensitivePath() function in kernel/util/path.go uses a denylist approach that was recently expanded (GHSA-h5vh-m7fg-w5h6, commit 9914fd1) but remains incomplete. Multiple security-relevant Linux directories are not blocked, including /opt (application data), /usr (local configs/binaries), /home (other users), /mnt and /media (mounted volumes). The globalCopyFiles and importStdMd endpoints rely on IsSensitivePath as their primary defense against reading files outside the workspace. Version 3.6.2 contains an updated fix.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-33194

CVE-2026-33194:

6.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/siyuan-note/siyuan/kernel	go	<= 3.6.1	3.6.2

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the IsSensitivePath function in kernel/util/path.go, which implements a flawed denylist-based approach for path validation. This denylist does not include several sensitive directories, allowing an attacker to bypass the security check. The globalCopyFiles function in kernel/api/file.go uses this vulnerable function, which leads to an arbitrary file read vulnerability. An attacker can specify a sensitive file path, which will be copied to a publicly accessible directory, and then the attacker can read the file. The fix involves switching to an allowlist approach, only permitting access to the workspace directory and explicitly approved paths.

Vulnerable functions

util.IsSensitivePath

kernel/util/path.go

The `IsSensitivePath` function in `kernel/util/path.go` uses a denylist to check for sensitive paths. This denylist is incomplete and misses several sensitive directories such as `/opt`, `/usr`, `/home`, `/mnt`, and `/media`. An attacker can bypass this check to read arbitrary files from the filesystem. The `globalCopyFiles` function in `kernel/api/file.go` calls `IsSensitivePath` for path validation, thus inheriting the vulnerability.

file.globalCopyFiles

kernel/api/file.go

The `globalCopyFiles` function is an API endpoint that copies files from a given source to a destination directory. It uses the `IsSensitivePath` function to check if the source path is sensitive. Due to the incomplete denylist in `IsSensitivePath`, an attacker can provide a path to a sensitive file (e.g., `/opt/siyuan/kernel/SiYuan-Kernel`) which will be copied to the workspace and can then be downloaded.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.