CVE-2025-67488
High · 7.8SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE
CVSS
7.8
EPSS
0.4%
Published
Dec 9, 2025
CISA due date
—
The record
Function [**importZipMd**](https://github.com/siyuan-note/siyuan/blob/dae6158860cc704e353454565c96e874278c6f47/kernel/api/import.go#L190) is vulnerable to **ZipSlip** which allows an authenticated user to overwrite files on the system.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/siyuan-note/siyuan/kernel | 0 | No fix |
| openSUSE:Leap 15.6 | govulncheck-vulndb | 0 | 0.0.20251230T014957-150000.1.134.1 |
Related vulnerabilities
- GO-2025-4221 SiYuan: ZipSlip -> Arbitrary File Overwrite -> RCE in github.com/siyuan-note/siyuan/kernel Same vulnerability
- CVE-2026-25992 SiYuan is a personal knowledge management system. Also affects github.com/siyuan-note/siyuan/kernel
- CVE-2026-25539 SiYuan is a personal knowledge management system. Also affects github.com/siyuan-note/siyuan/kernel
- GO-2026-4324 SiYuan Has a Stored Cross-Site Scripting (XSS) Vulnerability via Unrestricted SVG File… Also affects github.com/siyuan-note/siyuan/kernel
- GO-2026-4343 SiYuan has a Reflected Cross-Site Scripting (XSS) via /api/icon/getDynamicIcon in… Also affects github.com/siyuan-note/siyuan/kernel
- GO-2026-4346 SiYuan Vulnerable to Arbitrary File Read via File Copy Functionality in… Also affects github.com/siyuan-note/siyuan/kernel
- GO-2026-4347 SiYuan vulnerable to Arbitrary file Read / SSRF in github.com/siyuan-note/siyuan/kernel Also affects github.com/siyuan-note/siyuan/kernel
- GO-2026-4387 SiYuan has Arbitrary File Write via /api/file/copyFile leading to RCE in… Also affects github.com/siyuan-note/siyuan/kernel