CVE-2026-74798: SiYuan kernel Path Traversal via database_clean MCP tool
SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the databaseclean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView (kernel/model/attributeview.go), which builds a filesystem path via filepath.Join without validating that id matches SiYuan's node-ID format. An authenticated MCP client can supply path traversal sequences in id to cause the kernel to copy an arbitrary file readable by the process into SiYuan's history directory (arbitrary file read) and then delete the original file (arbitrary file deletion). The corresponding HTTP API handler was hardened in GHSA-7hm9-v7vf-7g4w, but this MCP caller was not.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SiYuan kernel (database_clean MCP tool)to a version that resolves this vulnerability.Fixed in v3.7.4Patch GHSA-7hm9-v7vf-7g4w
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74798?
The severity of CVE-2026-74798 is high with a score of 8.7.
How do I fix CVE-2026-74798?
To fix CVE-2026-74798, upgrade to SiYuan kernel version 3.7.4 or later.
What type of vulnerability is CVE-2026-74798?
CVE-2026-74798 is identified as a path traversal vulnerability.
What component of SiYuan is affected by CVE-2026-74798?
CVE-2026-74798 affects the database_clean MCP tool within the SiYuan kernel.
How can CVE-2026-74798 impact my system?
CVE-2026-74798 can allow an attacker to traverse directories and access restricted files.