SiYuan versions prior to v3.8.2 allow attackers to bypass a path guard that relies on case‑sensitive matching on Linux filesystems. By requesting a case‑variant path such as PublishAccess.json instead of the protected publishAccess.json, the application exposes sensitive publish‑access configuration and metadata to the attacker. The flaw results in the disclosure of configuration information but does not allow arbitrary code execution or denial of service on its own.

The vulnerability affects the Siyuan Note application provided by siyuan-note. Only Linux installations running any version before 3.8.2 are vulnerable, as the issue relies on Linux case‑sensitive file handling.

The CVSS score of 7.1 indicates moderate to high severity, but the EPSS score is unavailable and the vulnerability is not listed in CISA's KEV catalog. The likely attack vector is remote via HTTP requests to the application’s MCP file‑access handler; an attacker can reach the target by sending a modified URL that differs only in case. Given this, the risk is that an attacker with network access to a vulnerable instance could read restricted configuration files. No additional privileges or conditions are required once a request reaches the path handler.