{"id":8953,"date":"2026-11-14T12:17:43","date_gmt":"2026-11-14T12:17:43","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install"},"modified":"2026-11-14T12:17:43","modified_gmt":"2026-11-14T12:17:43","slug":"cve-2026-126393-siyuan-ssrf-skill-install","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/cve-2026-126393-siyuan-ssrf-skill-install","title":{"rendered":"CVE-2026-126393: SiYuan SSRF flaw lets attackers reach internal services via skill install"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">\u26a1 Quick Take<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><strong>What:<\/strong> CVE-2026-126393, a server-side request forgery (SSRF) vulnerability in SiYuan&#8217;s skill-install download path that allows attackers to reach internal services<\/li><li><strong>Who is affected:<\/strong> Users of SiYuan versions before 3.8.10 who install skills via MCP tool actions<\/li><li><strong>What to do:<\/strong> Upgrade to SiYuan version 3.8.10 or later<\/li><li><strong>Attack vector:<\/strong> Attackers supply a malicious skill URL that redirects or DNS-rebinds to loopback addresses (127.0.0.1)<\/li><li><strong>Severity:<\/strong> Medium (CVSS 6.1), requires user interaction or pre-approved settings<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SiYuan is a note-taking application that can install skills (extensions) from URLs. A security flaw in versions before 3.8.10 lets attackers trick the app into connecting to internal services on your computer. When you install a skill from a malicious URL, that URL can redirect to your computer&#8217;s internal addresses (like 127.0.0.1), letting the attacker reach services that should be private, such as cloud metadata endpoints. This requires either clicking a confirmation prompt or having pre-approved settings enabled. If you use SiYuan, update to version 3.8.10. If you don&#8217;t use this software, you can ignore this issue.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What happened<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SiYuan before version 3.8.10 contains a server-side request forgery vulnerability in the skill-install download path. The flaw exists because the <code>fetchBytes<\/code> function performs only a parse-time hostname check instead of using the <code>ssrfSafeClient<\/code> that was introduced in a previous security fix (GHSA-x8gv-g2g3-65fj).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">On version 3.8.8, the skill-install path performs a hostname check at parse time (skill.go:681), then downloads with <code>httpclient.NewBrowserRequest()<\/code> (skill.go:706), a plain HTTP client that resolves the hostname again at connect time. This creates a time-of-check to time-of-use vulnerability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability can be exploited in two ways:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. <strong>HTTP redirect:<\/strong> A public URL that returns a 302 redirect to <code>http:\/\/127.0.0.1\/...<\/code> passes the initial <code>CheckHostSSRF<\/code> validation (which only examines the first hostname), but <code>fetchBytes<\/code> follows the redirect without re-checking the target.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. <strong>DNS rebinding:<\/strong> An attacker-controlled domain can resolve to a public IP during validation, then resolve to a loopback address during the actual connection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The entry point is the MCP tool <code>skill<\/code> with <code>action=install<\/code> and a malicious <code>url<\/code> parameter (mcp\/tools\/skill.go:275). The install action is declared <code>LocalWrite<\/code>, requiring either user confirmation or a pre-approved setting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Testing in the same process against the same loopback target showed the asymmetry:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><code>ssrfSafeClient.Get(http:\/\/127.0.0.1:P)<\/code> returned error: &#8220;access to private\/internal IP is prohibited&#8221;<\/li><li><code>httpclient.NewBrowserRequest().Get(http:\/\/127.0.0.1:P)<\/code> returned 200 &#8220;INTERNAL-SERVICE&#8221;<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability was reported by Figo5 and assigned CVE-2026-126393 with a CVSS score of 6.1 (Medium severity). The CVSS vector is CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:R\/S:C\/C:L\/I:L\/A:N, indicating network attack vector, low complexity, no privileges required, user interaction required, changed scope, and low confidentiality and integrity impact.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you should do<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Upgrade to SiYuan version 3.8.10 or later. Version 3.8.10 patches this vulnerability.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The fix routes <code>fetchBytes<\/code> through <code>ssrfSafeClient<\/code> (or sets a DialContext with the same control hook) and re-validates each redirect hop or installs a CheckRedirect that re-applies <code>CheckHostSSRF<\/code> to every Location header.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What it means<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This vulnerability represents a residual SSRF risk that remained after a previous high-severity SSRF-by-DNS-rebinding issue (GHSA-x8gv-g2g3-65fj) was fixed. While that earlier fix introduced <code>ssrfSafeClient<\/code> to pin validated IPs at dial time for agent paths, the skill-install download path was not migrated to use the safe client.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The medium severity rating (rather than high) reflects the requirement for user interaction: either a confirmation click or pre-approved settings must be in place for the MCP skill install action to execute. This matches the UI:R (User Interaction Required) component in the CVSS score.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Successful exploitation allows attackers to reach internal services and cloud metadata endpoints (such as AWS EC2 metadata at 169.254.169.254 or similar services), potentially exposing sensitive information or enabling further attacks against internal infrastructure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect vector is considered a separate bug from DNS rebinding and represents a cheaper attack path, as it requires only a single malicious HTTP redirect rather than coordinated DNS timing attacks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Sources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/github.com\/siyuan-note\/siyuan\/security\/advisories\/GHSA-6pg3-pqxw-jm82\" target=\"_blank\" rel=\"noreferrer noopener\">GitHub Security Advisory GHSA-6pg3-pqxw-jm82<\/a><\/li><li><a href=\"https:\/\/www.vulncheck.com\/advisories\/siyuan-before-3.8.10-ssrf-via-skill-install-download-redirect-and-dns-rebinding\" target=\"_blank\" rel=\"noreferrer noopener\">VulnCheck Advisory: SiYuan before 3.8.10 SSRF via Skill-Install Download Redirect and DNS Rebinding<\/a><\/li><li><a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2026-126393\" target=\"_blank\" rel=\"noreferrer noopener\">NVD CVE-2026-126393<\/a><\/li><\/ul>\n","protected":false},"excerpt":{"rendered":"<p>SiYuan versions before 3.8.10 contain a server-side request forgery vulnerability in the skill-install download path. Attackers can supply a skill URL via the MCP skill install action that redirects or DNS-rebinds to loopback addresses, reaching internal services and metadata endpoints.<\/p>\n","protected":false},"author":2,"featured_media":8952,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"65","_nx_sec_severity":"medium","_nx_sec_affected":"SiYuan before 3.8.10","_nx_sec_status":"patch-available","_nx_sec_kicker":"ALERT: SiYuan SSRF flaw exposes internal services","_nx_sec_type":"mcp","_nx_sec_vendor":"SiYuan","_nx_sec_fixed":"3.8.10","_nx_sec_action":""},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-8953","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>CVE-2026-126393: SiYuan SSRF via skill install redirect<\/title>\n<meta name=\"description\" content=\"CVE-2026-126393 in SiYuan before 3.8.10 allows SSRF attacks via skill install URLs that redirect or DNS-rebind to loopback, reaching internal services.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CVE-2026-126393: SiYuan SSRF via skill install redirect\" \/>\n<meta property=\"og:description\" content=\"CVE-2026-126393 in SiYuan before 3.8.10 allows SSRF attacks via skill install URLs that redirect or DNS-rebind to loopback, reaching internal services.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-14T12:17:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"CVE-2026-126393: SiYuan SSRF flaw lets attackers reach internal services via skill install\",\"datePublished\":\"2026-11-14T12:17:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install\"},\"wordCount\":662,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"dateModified\":\"2026-11-14T12:17:43+00:00\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install\",\"name\":\"CVE-2026-126393: SiYuan SSRF via skill install redirect\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp\",\"datePublished\":\"2026-11-14T12:17:43+00:00\",\"description\":\"CVE-2026-126393 in SiYuan before 3.8.10 allows SSRF attacks via skill install URLs that redirect or DNS-rebind to loopback, reaching internal services.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp\",\"width\":1344,\"height\":768,\"caption\":\"Image: AI-generated, i10X\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/cve-2026-126393-siyuan-ssrf-skill-install#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CVE-2026-126393: SiYuan SSRF flaw lets attackers reach internal services via skill install\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CVE-2026-126393: SiYuan SSRF via skill install redirect","description":"CVE-2026-126393 in SiYuan before 3.8.10 allows SSRF attacks via skill install URLs that redirect or DNS-rebind to loopback, reaching internal services.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install","og_locale":"en_US","og_type":"article","og_title":"CVE-2026-126393: SiYuan SSRF via skill install redirect","og_description":"CVE-2026-126393 in SiYuan before 3.8.10 allows SSRF attacks via skill install URLs that redirect or DNS-rebind to loopback, reaching internal services.","og_url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install","og_site_name":"i10X News","article_published_time":"2026-11-14T12:17:43+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/11\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"CVE-2026-126393: SiYuan SSRF flaw lets attackers reach internal services via skill install","datePublished":"2026-11-14T12:17:43+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install"},"wordCount":662,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","dateModified":"2026-11-14T12:17:43+00:00"},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install","url":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install","name":"CVE-2026-126393: SiYuan SSRF via skill install redirect","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp","datePublished":"2026-11-14T12:17:43+00:00","description":"CVE-2026-126393 in SiYuan before 3.8.10 allows SSRF attacks via skill install URLs that redirect or DNS-rebind to loopback, reaching internal services.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/11\/cve-2026-126393-siyuan-ssrf-skill-install-title.webp","width":1344,"height":768,"caption":"Image: AI-generated, i10X"},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/cve-2026-126393-siyuan-ssrf-skill-install#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"CVE-2026-126393: SiYuan SSRF flaw lets attackers reach internal services via skill install"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=8953"}],"version-history":[{"count":0,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/8953\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/8952"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=8953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=8953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=8953"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=8953"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=8953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}