A vulnerability was found in SiYuan up to 3.6.1. It has been classified as critical. Impacted is an unknown function of the file /api/file/readDir. This manipulation causes path traversal.
This vulnerability appears as CVE-2026-33670. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is recommended.
