CVE-2026-118680
CVE-2026-118680 · SiYuan 3.8.7 through 3.8.8 Path Traversal via GLOBALROOT Alias
This page contains facts from public vulnerability sources. Check the original advisory before updating.
SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing the IsSensitivePath denylist. Attackers can invoke importStdMd with a GLOBALROOT-prefixed path to copy the API token and TLS private key into the publicly served assets directory.
CVSS 5.9 · Medium · EPSS 0.5%
- Published
- Updated
Affected products and versions
siyuan
- Versions
- ≥ 3.8.7, ≤ 3.8.8: Affected (semver)
No fix published