CVE-2025-67488: 
NixOS vulnerability analysis and mitigation

CVE-2025-67488 is a ZipSlip path traversal vulnerability in SiYuan, a self-hosted open-source personal knowledge management application written in Go and TypeScript. The flaw exists in the importZipMd function and allows an authenticated user to overwrite arbitrary files on the host system by uploading a crafted ZIP archive containing path traversal sequences. All versions up to and including 0.0.0-20251202123337-6ef83b42c7ce (i.e., before v3.5.0) are affected. The vulnerability was published on December 8, 2025, with a CVSS v3.1 score of 8.8 (High) per Feedly threat intelligence data, though the GitHub Advisory Database assigns a score of 7.8 (High) using a local attack vector (GitHub Advisory, Feedly).

The root cause is CWE-22 (Improper Limitation of a Pathname to a Restricted Directory), specifically a ZipSlip vulnerability in the importZipMd function located in kernel/api/import.go (around line 190). When a ZIP file is uploaded via the import functionality, the application extracts its contents using gulu.Zip.Unzip without sanitizing or validating file entry paths for directory traversal sequences (e.g., ../../). This allows an attacker to craft a ZIP archive where one or more entries contain path traversal sequences that resolve to locations outside the intended extraction directory, enabling arbitrary file writes anywhere the SiYuan process has write access. In Docker deployments, this can be exploited to overwrite /opt/siyuan/entrypoint.sh, which executes on container restart, escalating the attack to remote code execution (GitHub Advisory, import.go source).

Successful exploitation allows an authenticated attacker to overwrite any file on the system accessible to the SiYuan process, compromising integrity and potentially availability. In Docker-based deployments, overwriting entrypoint.sh and triggering a container restart achieves full remote code execution, leading to complete system compromise including confidentiality loss (data exfiltration), integrity loss (persistent backdoor), and availability impact (service disruption or takeover). The vulnerability can also enable persistence within the container environment (GitHub Advisory, Feedly).

A proof-of-concept exploit script (Python) is publicly available in the GitHub security advisory, demonstrating how to craft a malicious ZIP file with path traversal entries targeting /opt/siyuan/entrypoint.sh. Exploitation requires the attacker to be authenticated and have access to the import functionality. There is no evidence of in-the-wild exploitation at this time, and the vulnerability is not listed in the CISA KEV catalog. The EPSS score is approximately 0.066% (21st percentile), indicating a low but non-negligible probability of exploitation in the near term (GitHub Advisory, Feedly).

1. Gain authenticated access: Obtain valid credentials or an access authorization code for the target SiYuan instance (e.g., via credential theft, brute force, or insider access).
2. Identify the target file: Determine a high-value file to overwrite. For Docker deployments, /opt/siyuan/entrypoint.sh is the primary target for RCE escalation.
3. Craft the malicious ZIP: Use the public PoC Python script to generate a ZIP archive (exp.zip) containing a legitimate Test.md entry and a malicious entry with a path traversal filename (e.g., ../../../../../../../../../../opt/siyuan/entrypoint.sh) whose content is a backdoored shell script.

gz = prepare_zipslip('../../../../../../../../../../opt/siyuan/entrypoint.sh')
open('exp.zip', 'wb').write(gz)

4. Upload via import functionality: Submit the crafted ZIP to the SiYuan import endpoint (accessible through the notes import UI or API), triggering the vulnerable importZipMd function to extract the archive without path validation.
5. Trigger code execution: Wait for or induce a container restart. Upon restart, the overwritten entrypoint.sh executes the attacker-controlled payload, achieving remote code execution and persistence within the container (GitHub Advisory).

• Network: Unusual multipart file upload requests to the SiYuan import API endpoint (e.g., /api/import/importZipMd) containing ZIP files with anomalous filenames or from unexpected source IPs.
• File System: Unexpected modification timestamps on /opt/siyuan/entrypoint.sh or other system files outside the SiYuan workspace directory; presence of unfamiliar scripts or binaries in the SiYuan installation path (/opt/siyuan/).
• Logs: SiYuan application logs showing import operations with ZIP files containing entries with ../ sequences; container restart events following an import operation.
• Process: Unexpected child processes spawned by the SiYuan kernel process after a container restart (e.g., reverse shell processes, curl, wget, or other network utilities not normally invoked by SiYuan) (GitHub Advisory).

Upgrade SiYuan to version 3.5.0 or later, which contains the fix for this vulnerability. Until patching is possible, restrict access to the import functionality to trusted, authenticated users only, and consider disabling the import feature entirely if not actively required. For Docker deployments, implement file integrity monitoring on /opt/siyuan/entrypoint.sh and other critical files to detect unauthorized modifications. Additionally, applying network-level access controls to limit who can reach the SiYuan instance reduces the attack surface (GitHub Advisory, Feedly).

The vulnerability was reported by security researcher MrRauL124 and published via GitHub's security advisory process on December 8, 2025. The advisory was picked up by automated vulnerability tracking services including CIRCL Vulnerability Lookup, CVEFeed, VulDB, and Red Hat's CVE tracker shortly after disclosure. No significant public commentary from notable security researchers or broader media coverage has been identified beyond standard vulnerability database aggregation (GitHub Advisory).