Sensitive Path Denylist Bypass in SiYuan on Windows

CVE-2026-116171

What is CVE-2026-116171?

Versions of SiYuan prior to 3.8.7 for Windows are susceptible to a vulnerability that allows authenticated API callers to hijack sensitive files. The flaw exists in the IsSensitivePath function, where the presence of the Windows extended-length path prefix (?) circumvents the denylist checks. This permits attackers access to workspace configuration files, potentially exposing critical data such as API tokens and TLS private keys to unauthorized users.

References