Vibe Coding
SiYuan's Agent Tools Resolved DNS at Guard Time and Again at Connect Time (CVE-2026-82234, 8.4)
SiYuan before v3.8.1 has an SSRF in its `http_request` and `web_fetch` agent tools that resolve DNS only when running the safety check, never validating the connect-time resolution, so an attacker answers the guard lookup with a public address and the real lookup with an internal one. The paired CVE-2026-82233 (6.9) is a path traversal in the `asset.upload` MCP tool that accepts absolute paths with no workspace boundary check, letting an attacker induce the agent to upload SSH keys from outside the workspace. Both published 2026-08-28.
Source
↳ Follow the thread