## SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

- 種別: advisory
- 重大度: medium
- 関連技術: go, github
- CVE: CVE-2026-60083
- 公開日時: 2026-10-27T14:43:57.000Z
- 情報源: GitHub Advisory Database (https://github.com/advisories/GHSA-c8r8-95hg-mp34)
- パーマリンク: https://vulnpulse.app/items/ghsa-ghsa-c8r8-95hg-mp34

影響: go:github.com/siyuan-note/siyuan/kernel < 0.0.0-20260808051406-3542530c505f → 0.0.0-20260808051406-3542530c505f
kernel/mcp/tools/file.go's resolvePath() includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist (refuseToAccess() in kernel/api/file.go), following the remediation for GHSA-cvhv-7xhj-xjp8 ("Unauthenticated Administrator takeover exfiltrated via the MCP"), which specifically recommended restricting this tool's scope. In practice, the MCP tool implements only 1 of the 4 static blocklist entries the HTTP API enforces. Comp…