CVE-2026-82233 | SiYuan Note up to 3.8.0 Asset Upload MCP Tool path traversal

August 28, 2026 Yanac

A vulnerability has been found in SiYuan Note SiYuan up to 3.8.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Asset Upload MCP Tool. Performing a manipulation results in path traversal.

This vulnerability was named CVE-2026-82233. The attack may be initiated remotely. There is no available exploit.

The affected component should be upgraded.VulDB Recent EntriesRead More