{"id":8915,"date":"2026-11-13T22:24:22","date_gmt":"2026-11-13T22:24:22","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows"},"modified":"2026-11-13T22:24:22","modified_gmt":"2026-11-13T22:24:22","slug":"cve-2026-126776-siyuan-mcp-path-traversal-windows","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-126776-siyuan-mcp-path-traversal-windows","title":{"rendered":"CVE-2026-126776: SiYuan MCP Tools Path Traversal Lets Attackers Write Files Outside Import Directory on Windows"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A path traversal vulnerability in the SiYuan note-taking application allowed attackers to write arbitrary files outside the intended import directory on Windows systems. The flaw, tracked as CVE-2026-126776, affected versions 3.7.0 through 3.8.9 and was fixed in version 3.8.10 released on November 10, 2026.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> Path traversal vulnerability in SiYuan&#8217;s MCP web_fetch and http_request tools on Windows<\/li><li><strong>Affected:<\/strong> SiYuan versions 3.7.0 through 3.8.9 on Windows only<\/li><li><strong>Fixed:<\/strong> Version 3.8.10 released November 10, 2026<\/li><li><strong>Risk:<\/strong> Attackers controlling a fetched URL can write files outside temp\/import directory<\/li><li><strong>Action:<\/strong> Update to SiYuan 3.8.10 or later<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SiYuan is a note-taking application that includes AI agent tools for fetching web content. A security researcher found that on Windows, these tools could be tricked into saving downloaded files in the wrong place. An attacker who could control a web address that SiYuan fetched could write a file with chosen content anywhere the SiYuan user had permission to write. If you use SiYuan on Windows, update to version 3.8.10. If you don&#8217;t use SiYuan, you can ignore this.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability existed in kernel\/util\/webfetch.go in the extractFilename function. When SiYuan&#8217;s MCP (Model Context Protocol) tools web_fetch or http_request downloaded non-text content, they saved it to a file in the temp\/import directory. The filename was derived from the URL path using Go&#8217;s path.Base function, which only treats forward slashes as path separators.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On Windows, backslashes are path separators, but path.Base does not recognize them. An attacker could craft a URL like <code>http:\/\/attacker.example\/..%5C..%5Cescaped.exe<\/code> (where %5C is a URL-encoded backslash). The extractFilename function would extract <code>....\\escaped.exe<\/code> as the filename. When this was passed to filepath.Join on Windows, the backslashes were treated as directory separators, causing the file to be written two directories above temp\/import.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">According to the GitHub security advisory GHSA-hq2c-hh95-vrr6, there was no containment check after filepath.Join to verify the final path remained inside the import directory. The SSRF (Server-Side Request Forgery) checks only validated the hostname, not the resulting file path.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability was discovered by Zachariah Mithani of AploSec. The researcher provided a proof-of-concept that demonstrated the issue using the actual extractFilename and extByContentType functions from the v3.8.9 release, showing that on Windows the file escaped the import directory while on Linux it stayed contained with a backslash in the filename.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fix, committed on November 10, 2026 (commit 94d6a42), normalized backslashes to forward slashes before extracting the base filename, added validation to reject names containing path separators or &#8220;..&#8221; sequences, and implemented a containment check using gulu.File.IsSubPath to verify the final path remained inside the import directory.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">If you use SiYuan on Windows, update to version 3.8.10 or later immediately. The update is available from the SiYuan GitHub releases page. Linux and macOS users are not affected by this specific vulnerability but should still update to receive other security and feature improvements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability highlights the risks of AI agent tools that fetch and save external content. The MCP tools in SiYuan run GET requests without a confirmation prompt, according to the security advisory. An AI agent steered by prompt injection could be made to fetch an attacker-controlled URL, resulting in an arbitrary file write.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The impact depends on where SiYuan&#8217;s TempDir is located and what directories are writable by the user. Writing to a startup folder or other auto-run location could lead to code execution when the user next logs in. The vulnerability received a CVSS v4 score of 6.0 (medium severity), reflecting that it requires user interaction (the agent must be prompted to fetch the URL) and attack complexity (the attacker must control a URL the agent will fetch).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The sources do not state whether this vulnerability was exploited in the wild. The fix was released the same day the advisory was published, suggesting responsible disclosure.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/github.com\/siyuan-note\/siyuan\/security\/advisories\/GHSA-hq2c-hh95-vrr6\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Security Advisory GHSA-hq2c-hh95-vrr6<\/a><\/li><li><a href=\"https:\/\/github.com\/siyuan-note\/siyuan\/commit\/94d6a42a0362c0a6938a29ab84addb1fe0aca21c\" target=\"_blank\" rel=\"noreferrer noopener\">SiYuan commit 94d6a42<\/a><\/li><li><a href=\"https:\/\/github.com\/siyuan-note\/siyuan\/releases\/tag\/v3.8.10\" target=\"_blank\" rel=\"noreferrer noopener\">SiYuan v3.8.10 release notes<\/a><\/li><li><a href=\"https:\/\/www.vulncheck.com\/advisories\/siyuan-3.7.0-before-3.8.10-path-traversal-file-write-via-mcp-web-fetch\" target=\"_blank\" rel=\"noreferrer noopener\">VulnCheck advisory<\/a><\/li><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-126776\" target=\"_blank\" rel=\"noreferrer noopener\">NVD CVE-2026-126776<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>SiYuan 3.7.0 before 3.8.10 on Windows contains a path traversal vulnerability in kernel\/util\/webfetch.go that allows attackers to write files outside the import directory via backslash-encoded filenames in MCP web_fetch or http_request tools.<\/p>\n","protected":false},"author":2,"featured_media":8914,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"SiYuan 3.7.0 through 3.8.9 on Windows","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: Windows Path Traversal in AI Note App","_nx_sec_type":"mcp","_nx_sec_vendor":"SiYuan","_nx_sec_fixed":"3.8.10","_nx_sec_action":""},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-8915","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-126776: SiYuan MCP Path Traversal on Windows<\/title>\n<meta name=\"description\" content=\"CVE-2026-126776 in SiYuan 3.7.0 before 3.8.10 on Windows allows attackers to write files outside temp\/import via backslash-encoded paths.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-126776: SiYuan MCP Path Traversal on Windows\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-126776 in SiYuan 3.7.0 before 3.8.10 on Windows allows attackers to write files outside temp\/import via backslash-encoded paths.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-13T22:24:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-126776: SiYuan MCP Tools Path Traversal Lets Attackers Write Files Outside Import Directory on Windows\",\"datePublished\":\"2026-11-13T22:24:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows\"},\"wordCount\":677,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-13T22:24:22+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows\",\"name\":\"CVE-2026-126776: SiYuan MCP Path Traversal on Windows\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp\",\"datePublished\":\"2026-11-13T22:24:22+00:00\",\"description\":\"CVE-2026-126776 in SiYuan 3.7.0 before 3.8.10 on Windows allows attackers to write files outside temp\\\/import via backslash-encoded paths.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126776-siyuan-mcp-path-traversal-windows#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-126776: SiYuan MCP Tools Path Traversal Lets Attackers Write Files Outside Import Directory on Windows\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-126776: SiYuan MCP Path Traversal on Windows","description":"CVE-2026-126776 in SiYuan 3.7.0 before 3.8.10 on Windows allows attackers to write files outside temp\/import via backslash-encoded paths.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-126776: SiYuan MCP Path Traversal on Windows","og_description":"CVE-2026-126776 in SiYuan 3.7.0 before 3.8.10 on Windows allows attackers to write files outside temp\/import via backslash-encoded paths.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows","og_site_name":"i10X News","article_published_time":"2026-11-13T22:24:22+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-126776: SiYuan MCP Tools Path Traversal Lets Attackers Write Files Outside Import Directory on Windows","datePublished":"2026-11-13T22:24:22+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows"},"wordCount":677,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-13T22:24:22+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows","name":"CVE-2026-126776: SiYuan MCP Path Traversal on Windows","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp","datePublished":"2026-11-13T22:24:22+00:00","description":"CVE-2026-126776 in SiYuan 3.7.0 before 3.8.10 on Windows allows attackers to write files outside temp\/import via backslash-encoded paths.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126776-siyuan-mcp-path-traversal-windows-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126776-siyuan-mcp-path-traversal-windows#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-126776: SiYuan MCP Tools Path Traversal Lets Attackers Write Files Outside Import Directory on Windows"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=8915"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8915\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/8914"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=8915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=8915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=8915"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=8915"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=8915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}