diff --git a/kernel/cache/asset.go b/kernel/cache/asset.go
index 9dc63ea0e..05b83de8d 100644
--- a/kernel/cache/asset.go
+++ b/kernel/cache/asset.go
@@ -54,6 +54,11 @@ func SetAssetHash(hash, path string) {
 	assetHashLock.Lock()
 	defer assetHashLock.Unlock()
 
+	if !strings.HasPrefix(path, "assets/") {
+		logging.LogErrorf("invalid asset path [%s]", path)
+		return
+	}
+
 	assetHashCache[hash] = &AssetHash{Hash: hash, Path: path}
 	assetPathHashCache[path] = &AssetHash{Hash: hash, Path: path}
 }