CVE-2026-109309
6.5MediumPublished 12 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
- Impact
- High impact on confidentiality
- Weakness
- CWE-22
Impact
Attackers can read arbitrary files accessible to the SiYuan process—including conf.json and the API token—by tricking a user into loading a malicious kernel plugin. This requires network access and user interaction to install or execute the malicious plugin.
Root cause
The kernel plugin HTTP server passes the plugin's ResponseFile.Path parameter directly to gin's Context.File without sanitizing or validating absolute paths.
Affected systems
SiYuan v3.7.0 before v3.8.6
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Fix & remediation
Upgrade SiYuan to version v3.8.6 or later. If you cannot patch immediately, disable or avoid installing untrusted kernel plugins.
$ docker pull b3log/siyuan:v3.8.6AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
SiYuan v3.7.0 before v3.8.6 contains an absolute path traversal vulnerability in the kernel's private plugin HTTP server, which passes a kernel plugin handler's ResponseFile.Path to gin's Context.File without validation. Attackers supplying a malicious kernel plugin can return an absolute path to read any file readable by the SiYuan process, including the API token and conf.json.