CVE-2026-85583: SiYuan Path Traversal Vulnerability

CVE-2026-85583 Overview

CVE-2026-85583 is a path traversal vulnerability in SiYuan, an open-source personal knowledge management application, affecting versions prior to v3.8.2. The flaw resides in the reader-accessible file-read endpoint, which follows symbolic links when opening authorized asset paths under data/assets/. Attackers holding the reader role can request a logical asset that is a symlink pointing outside the workspace and receive the target file contents. The issue is tracked under CWE-59: Improper Link Resolution Before File Access ('Link Following').

Critical Impact
Authenticated reader-role users can read arbitrary files outside the SiYuan workspace boundary, exposing configuration files, credentials, and other sensitive host data.

Affected Products

SiYuan versions prior to v3.8.2
Deployments using the reader-role file-read endpoint
Instances where workspace directories permit user-writable symlinks under data/assets/

Discovery Timeline

2026-09-04 - CVE-2026-85583 published to the National Vulnerability Database (NVD)
2026-09-08 - Last updated in the NVD database

Technical Details for CVE-2026-85583

Vulnerability Analysis

SiYuan exposes a file-read endpoint that serves assets referenced by notebooks. The endpoint validates that the requested logical path resides within data/assets/ but does not verify the resolved physical target. When the path resolver encounters a symbolic link, it follows the link and returns the target bytes to the caller. This behavior allows a reader-role user to escape the workspace sandbox and read files on the host filesystem accessible to the SiYuan process.

The vulnerability affects any deployment where an attacker can place or trigger placement of a symlink inside the assets directory. Multi-user SiYuan instances with shared workspaces are the primary risk surface. Read access is limited by the operating-system permissions granted to the SiYuan process, which on typical installations includes user configuration files, application secrets, and adjacent notebooks.

Root Cause

The root cause is missing link resolution checks in the asset-serving handler. The handler performs a lexical containment check on the requested path against data/assets/ before opening the file. It does not call a canonicalization routine that would resolve symbolic links and re-verify containment against the workspace root. A hardened implementation must resolve the real path, compare it to the workspace boundary, and reject reads whose targets fall outside that boundary.

Attack Vector

Exploitation requires an authenticated session with the reader role and network access to the SiYuan HTTP interface. The attacker requests a logical asset path such as data/assets/link.dat, where link.dat is a symlink to a sensitive file like /etc/passwd or ~/.ssh/id_rsa. The server follows the link and returns the file contents in the HTTP response. No user interaction is required beyond the initial request.

A public proof-of-concept is not listed in the enriched data. Refer to the GitHub Security Advisory GHSA-g7gf-v79m-jwrm and the VulnCheck advisory for additional technical detail.

Detection Methods for CVE-2026-85583

Indicators of Compromise

HTTP GET requests to the SiYuan file-read endpoint referencing assets that resolve to paths outside data/assets/.
Unexpected read access by the SiYuan process to system files such as /etc/passwd, /etc/shadow, or user SSH keys.
Presence of symbolic links inside data/assets/ whose targets fall outside the workspace root.

Detection Strategies

Audit the SiYuan workspace filesystem for symbolic links using find data/assets -type l and review each target.
Enable HTTP access logging on the SiYuan server and parse for anomalous asset requests, especially those originating from reader-role sessions.
Correlate process-level file open events for the SiYuan binary against the workspace boundary to identify boundary escapes.

Monitoring Recommendations

Forward SiYuan application logs and host filesystem telemetry to a centralized analytics platform for retention and query.
Alert on file reads by the SiYuan process outside the declared workspace directory.
Track authentication events for reader-role accounts and flag repeated asset requests targeting the same filename with varying extensions.

How to Mitigate CVE-2026-85583

Immediate Actions Required

Upgrade SiYuan to version v3.8.2 or later on all self-hosted and multi-user deployments.
Enumerate and remove any existing symbolic links under data/assets/ that resolve outside the workspace root.
Rotate any credentials, tokens, or keys stored on hosts running vulnerable SiYuan instances if reader-role access was granted to untrusted users.
Review reader-role account membership and revoke access for users who do not require it.

Patch Information

The SiYuan maintainers addressed the vulnerability in v3.8.2. The fix enforces symlink-aware path resolution in the file-read endpoint, ensuring that resolved targets remain within the workspace boundary. Refer to the GitHub Security Advisory GHSA-g7gf-v79m-jwrm for the official patch details and release notes.

Workarounds

Restrict network access to the SiYuan HTTP interface to trusted users only, using a reverse proxy with IP allow-listing or VPN gating.
Run the SiYuan process under a dedicated low-privilege system account that lacks read access to sensitive host files.
Mount the workspace on a filesystem that prohibits symlink creation, or apply mount options such as nosymfollow where supported.
Disable reader-role sharing until the upgrade is applied.

bash

# Enumerate symbolic links inside the SiYuan assets directory
find /path/to/siyuan/workspace/data/assets -type l -exec ls -la {} \;

# Remove suspicious symlinks after review
find /path/to/siyuan/workspace/data/assets -type l -delete