CVE-2026-87815

Published: Sep 9, 2026Modified: Sep 14, 2026Deferred

8.4

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: disclosure@vulncheck.com (Secondary)

Description

SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter. An authenticated administrator can supply path traversal sequences to delete arbitrary .deck and .cards files outside the workspace directory.

Related CWEs

CWE-73

External Control of File Name or Path

The product allows user input to control or influence paths or file names that are used in filesystem operations.

References (3)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-94vh-rpgr-rpwc

Source: disclosure@vulncheck.com

https://www.vulncheck.com/advisories/siyuan-before-3.8.2-path-traversal-via-removeriffdeck

Source: disclosure@vulncheck.com

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-94vh-rpgr-rpwc

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.