CPE

Cpe:2.3:a:siyuan:siyuan:::*:::windows::

1 brief RSS

SiYuan: Sensitive-path denylist bypass (CVE-2026-116171)

SiYuan versions 3.5.4 through 3.8.6 on Windows contain a path denylist bypass vulnerability (CVE-2026-116171) that allows authenticated attackers to exfiltrate sensitive workspace files by prepending a Windows extended-length prefix to path parameters.

SiYuan path-traversal security-bypass credential-theft vulnerability

1t 1c 16m ago

Cpe:2.3:a:siyuan:siyuan:*:*:*:*:*:windows:*:*

SiYuan: Sensitive-path denylist bypass (CVE-2026-116171)

Cpe:2.3:a:siyuan:siyuan:::*:::windows::