diff --git a/kernel/api/asset.go b/kernel/api/asset.go
index ee83f45c3..a6606cebb 100644
--- a/kernel/api/asset.go
+++ b/kernel/api/asset.go
@@ -65,6 +65,11 @@ func statAsset(c *gin.Context) {
 		return
 	}
 
+	if !util.IsAbsPathInWorkspace(p) {
+		ret.Code = 1
+		return
+	}
+
 	info, err := os.Stat(p)
 	if err != nil {
 		ret.Code = 1