VULNERABILITY INTELLIGENCE
CVE-2026-77086
CVSS score9.1 CRITICAL
EPSS probability1.03%
CISA KEVNot currently listed
Published2026-08-21
Last modified2026-10-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Description
SiYuan before v3.7.4 fails to validate the packageName parameter in Bazaar install and uninstall endpoints, allowing authenticated administrators to perform path traversal via directory traversal sequences. Attackers with admin access can write arbitrary files to any location via install operations or recursively delete directories via uninstall operations by supplying crafted packageName values.
Weakness classification
- disclosure@vulncheck.com: CWE-22