What is the CVSS score of CVE-2026-32110?

CVE-2026-32110 has a CVSS 3.1 base score of 8.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L. EPSS exploitation probability: 0.0%.

Which versions of Siyuan are affected by CVE-2026-32110?

SiYuan Note contains a critical vulnerability that allows authenticated users to bypass network controls and access internal systems, cloud metadata services, and sensitive infrastructure.. A patch is available.

How to fix or mitigate CVE-2026-32110?

Within 24 hours: Identify all SiYuan Note deployments and assess user access logs for suspicious proxy requests. Within 7 days: Implement network segmentation to restrict SiYuan Note server outbound traffic, disable the `/api/network/forwardProxy` endpoint if not business-critical, and require additional authentication for proxy features. Within 30 days: Evaluate alternative note-taking solutions, plan migration strategy, and establish monitoring for exploitation attempts.

Siyuan CVE-2026-32110

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-03-11 security-advisories@github.com

GHSA-56cv-c5p2-j2wg

SSRF Siyuan Suse

8.3

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

8.3 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

SUSE

HIGH

qualitative

Primary rating from GitHub Advisory.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

Low

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 22:07 vuln.today

CVE Published

Mar 11, 2026 - 21:16 nvd

HIGH 8.3

DescriptionGitHub Advisory

SiYuan is a personal knowledge management system. Prior to 3.6.0, the /api/network/forwardProxy endpoint allows authenticated users to make arbitrary HTTP requests from the server. The endpoint accepts a user-controlled URL and makes HTTP requests to it, returning the full response body and headers. There is no URL validation to prevent requests to internal networks, localhost, or cloud metadata services. This vulnerability is fixed in 3.6.0.

AnalysisAI

High severity vulnerability in SiYuan Note.

The `/api/network/forwardProxy` endpoint allows authenticated users to make arbitrary HTTP requests from the server. The endpoint accepts a user-controlled URL and makes HTTP requests to it, returning the full response body and headers. There is no URL validation to prevent requests to internal networks, localhost, or cloud metadata services.

Technical ContextAI

Vulnerability Type: Server-Side Request Forgery (SSRF) (CWE-918) CVSS 3.1: 8.3/10.0 — Attack Vector: Network | Complexity: Low | Privileges Required: Low | User Interaction: None Attack Techniques: Ssrf Source: https://github.com/siyuan-note/siyuan Server-Side Request Forgery allows attackers to make the server perform requests to internal/external resources on their behalf.