{"id":"ghsa-ghsa-c8r8-95hg-mp34","seq":1708825,"kind":"advisory","title":"SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files","url":"https://github.com/advisories/GHSA-c8r8-95hg-mp34","permalink":"https://vulnpulse.app/items/ghsa-ghsa-c8r8-95hg-mp34","summary":"影響: go:github.com/siyuan-note/siyuan/kernel < 0.0.0-20260808051406-3542530c505f → 0.0.0-20260808051406-3542530c505f\nkernel/mcp/tools/file.go's resolvePath() includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist (refuseToAccess() in kernel/api/file.go), following the remediation for GHSA-cvhv-7xhj-xjp8 (\"Unauthenticated Administrator takeover exfiltrated via the MCP\"), which specifically recommended restricting this tool's scope. In practice, the MCP tool implements only 1 of the 4 static blocklist entries the HTTP API enforces. Comp…","severity":"medium","techs":["go","github"],"cves":["CVE-2026-60083"],"tags":["GHSA-c8r8-95hg-mp34","github.com/siyuan-note/siyuan/kernel"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-27T14:43:57.000Z","fetched_at":"2026-10-27T21:03:52.214Z"}