Vibe Coding
SiYuan's MCP Tools Leak Stored Secrets Into Attacker-Controlled URLs (CVE-2026-59809, CVE-2026-60083)
Two advisories published 2026-08-22 cover SiYuan before v3.8.0. CVE-2026-59809 (CVSS 4.9) has the `http_request` MCP tool interpolating secret placeholders into the destination URL, so an MCP client can craft a request that ships plaintext secret values to any public host with no confirmation step. CVE-2026-60083 (CVSS 4.9) is an incomplete path blocklist in the MCP file tool that lets authenticated admins read `data/.siyuan/publishAccess.json` publish-mode passwords. The pattern to check in your own servers: placeholder interpolation into a URL parameter is an exfiltration primitive.
Source
↳ Follow the thread