CVE-2026-116171 - SiYuan 3.5.4 before 3.8.7 Sensitive Path Bypass via Windows Extended-Length Prefix
CVE ID :CVE-2026-116171 Published : Oct. 25, 2026, 2:16 p.m. | 2 hours, 5 minutes ago Description :SiYuan 3.5.4 before 3.8.7 on Windows contains a sensitive-path denylist bypass in IsSensitivePath because the Windows extended-length prefix (\\?\) survives filepath.Clean and matches no...