SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files

影響: go:github.com/siyuan-note/siyuan/kernel < 0.0.0-20260808051406-3542530c505f → 0.0.0-20260808051406-3542530c505f

kernel/mcp/tools/file.go's resolvePath() includes an explicit comment stating its sensitive-path blocklist is meant to align with the HTTP file API's established blacklist (refuseToAccess() in kernel/api/file.go), following the remediation for GHSA-cvhv-7xhj-xjp8 ("Unauthenticated Administrator takeover exfiltrated via the MCP"), which specifically recommended restricting this tool's scope. In practice, the MCP tool implements only 1 of the 4 static blocklist entries the HTTP API enforces. Comp…

Read on GitHub Advisory Database

On 10/27/2026, 11:43 PM, GitHub Advisory Database published "SiYuan: MCP file tool's blocklist is incomplete relative to the HTTP file API it claims to align with, exposing publish-mode passwords and other sensitive workspace files" (type: Advisory). Severity is "Medium" (medium). Related technologies: Go, GitHub. CVE: CVE-2026-60083.