What is the CVSS score of CVE-2026-59853?

CVE-2026-59853 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.2%.

SiYuan CVE-2026-59853

MEDIUM

Missing Authorization (CWE-862)

2026-07-09 GitHub_M

Authentication Bypass Siyuan Siyuan Note

6.5

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

6.5 MEDIUM

Network-accessible API requires low-privilege Reader authentication (PR:L); metadata-only disclosure is confined to the vulnerable SiYuan instance with no integrity or availability impact.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 09, 2026 - 23:32 vuln.today

DescriptionCVE.org

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the /api/storage/getCriteria endpoint returns saved search criteria from data/storage/criteria.json without the publish-access filtering used by sibling storage endpoints, allowing a publish-mode Reader to read private document paths, notebook, document, and block IDs, and search and replace keywords for unpublished documents. This issue is fixed in versions 3.7.1.

AnalysisAI

Missing authorization on the /api/storage/getCriteria endpoint in SiYuan personal knowledge management software exposes saved search criteria - including private document paths, notebook and block IDs, and search/replace keyword history - to any publish-mode Reader, bypassing the access controls applied by all sibling storage endpoints. All SiYuan releases prior to 3.7.1 are affected per the vendor security advisory GHSA-px3c-cf92-9g83. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV, though the low attack complexity and readily available fix commit make this straightforward to weaponize against exposed instances.

Technical ContextAI

SiYuan (CPE: cpe:2.3:a:siyuan-note:siyuan:*:*:*:*:*:*:*:*) is a self-hosted, open-source personal knowledge management system that supports a publish mode granting external parties Reader-level access to selected content. Internal storage endpoints under /api/storage/ serve files from the local data directory and are expected to apply publish-access filtering to prevent Readers from seeing content outside their permitted scope. The /api/storage/getCriteria endpoint reads from data/storage/criteria.json and returns saved search criteria but omits the publish-access filtering logic present in its sibling endpoints. The root cause is CWE-862 (Missing Authorization): the endpoint does not verify whether the authenticated caller's role entitles them to the full criteria store, which includes metadata referencing unpublished and private documents.

RemediationAI

Upgrade SiYuan to version 3.7.1 or later; this is the vendor-released patch that applies consistent publish-access filtering to the /api/storage/getCriteria endpoint. The fix commit is available at https://github.com/siyuan-note/siyuan/commit/0049d0f04ffe9837760d29248b9ef31605077d36 and the release is tagged at https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1. As a compensating control prior to patching, administrators can disable publish mode entirely if external read access is not operationally required - note that doing so removes all public read access to shared content. Alternatively, restricting network access to the SiYuan instance via firewall rules or reverse-proxy authentication to trusted users will prevent exploitation by external parties, though this does not eliminate risk from insider misuse of Reader accounts.