Vibe Coding
CVE-2026-85580: SiYuan's MCP file guard matched paths case-sensitively on Linux
SiYuan before v3.8.2 protects publishAccess.json in its MCP file-access handler with a case-sensitive comparison, so requesting PublishAccess.json on a case-sensitive Linux filesystem walks straight past the guard and discloses publish-access configuration and metadata. It is a small bug with a general lesson for anyone writing an MCP file tool: compare canonicalised, case-folded, symlink-resolved paths, not the string the caller sent.
Source
↳ Follow the thread