EUVD-2026-39101Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-delivered via marketplace content with no auth (PR:N), but requires the victim to view a malicious package (UI:R); Electron RCE yields full C/I/A impact.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
Lifecycle Timeline
2DescriptionCVE.org
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, Lute's HTML sanitizer does not remove <iframe> elements. Combined with the SiYuan Electron client's permissive security configuration, an attacker can include a malicious <iframe> in a Bazaar package README that executes arbitrary commands on the victim's machine when the package details are viewed. No package installation is required. This vulnerability is fixed in 3.7.0.
AnalysisAI
Arbitrary command execution in the SiYuan Electron desktop client (versions prior to 3.7.0) allows a remote attacker to run OS commands on a victim's machine when they merely view a malicious Bazaar marketplace package's README. The root cause is that Lute's HTML sanitizer fails to strip <iframe> elements, which combine with the Electron client's permissive security settings (e.g. node integration / relaxed sandboxing) to escalate stored XSS into full code execution; notably no package installation is required, only viewing the package details. No public exploit has been identified at time of analysis, but the CVSS 4.0 score of 8.7 (High) reflects high confidentiality, integrity, and availability impact.
Technical ContextAI
SiYuan is an open-source personal knowledge management system distributed as an Electron desktop application (CPE cpe:2.3:a:siyuan-note:siyuan). It uses Lute, SiYuan's own Markdown/HTML engine, to render user-supplied content. The flaw is a classic CWE-79 (Improper Neutralization of Input During Web Page Generation / Cross-Site Scripting): Lute's sanitizer allowlist did not remove <iframe> tags, so attacker-controlled HTML embedded in a Bazaar (community marketplace) package README is rendered live. Because Electron's renderer was configured permissively, the embedded iframe is not confined to a harmless web context and can reach Node/OS-level capabilities, turning a web-layer injection into native command execution - a markedly higher impact than browser-sandboxed XSS.
RemediationAI
Vendor-released patch: upgrade SiYuan to version 3.7.0 or later, which fixes Lute's sanitizer to strip <iframe> elements; see the advisory at https://github.com/siyuan-note/siyuan/security/advisories/GHSA-r6v5-4c66-f6pw. Until upgrading, avoid opening or viewing details of untrusted or unfamiliar Bazaar marketplace packages, since merely viewing a malicious README triggers the flaw (no installation needed) - the trade-off is reduced ability to evaluate community packages. Organizations can further reduce exposure by restricting use of the Bazaar marketplace within the Electron client or by isolating the desktop app from sensitive hosts; where feasible, using a sandboxed/web-served deployment rather than the permissive Electron client limits the escalation from XSS to command execution.
SQL injection in SiYuan personal knowledge management (versions <= v3.7.2) lets attackers pass arbitrary SQL statements
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Cross-site scripting (XSS) in SiYuan personal knowledge management system versions 3.6.0-3.6.1 allows remote attackers t
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today