What is the CVSS score of CVE-2026-59854?

CVE-2026-59854 has a CVSS 3.1 base score of 4.9 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.3%.

SiYuan CVE-2026-59854

MEDIUM

Protection Mechanism Failure (CWE-693)

2026-07-09 GitHub_M

Information Disclosure Docker Siyuan

4.9

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

4.9 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

4.9 MEDIUM

Network-accessible API (AV:N) requires admin or API-token authentication (PR:H); credential file exfiltration is C:H with no integrity or availability impact.

3.1 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 09, 2026 - 23:31 vuln.today

DescriptionCVE.org

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacker-supplied absolute source paths and relies on util.IsSensitivePath in kernel/util/path.go, whose denylist misses common home-directory credential files such as .git-credentials, .netrc, .pgpass, .kube/config, .docker/config.json, and .gnupg, allowing an authenticated administrator or API-token user to copy those files into the workspace and exfiltrate them through the file API. This issue is fixed in versions 3.7.1-alpha.2 and 3.7.1.

AnalysisAI

Credential file exfiltration in SiYuan prior to 3.7.1 is possible through the POST /api/file/globalCopyFiles endpoint, which accepts arbitrary absolute source paths and relies on an incomplete denylist in util.IsSensitivePath to block sensitive files. The denylist omits common credential files including .git-credentials, .netrc, .pgpass, .kube/config, .docker/config.json, and .gnupg, enabling an authenticated administrator or API-token holder to copy these files into the workspace and read them via the file API. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Obtain SiYuan admin credentials or API token

Delivery

Send POST /api/file/globalCopyFiles with absolute credential file path

Exploit

Bypass incomplete denylist in util.IsSensitivePath

Execution

Credential file copied into workspace

Persist

Retrieve file contents via SiYuan file API

Impact

Exfiltrate host credentials for lateral movement

Access

Obtain SiYuan admin credentials or API token

Delivery

Send POST /api/file/globalCopyFiles with absolute credential file path

Exploit

Bypass incomplete denylist in util.IsSensitivePath

Execution

Credential file copied into workspace

Persist

Retrieve file contents via SiYuan file API

Impact

Exfiltrate host credentials for lateral movement

Vulnerability AssessmentAI

Exploitation	Exploitation requires an authenticated session with administrator-level privileges or a valid SiYuan API token - PR:H per the CVSS vector. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 3.1 base score of 4.9 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) accurately characterizes this vulnerability. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker who has obtained SiYuan administrator credentials or a valid API token - through phishing, credential reuse, or insider access - sends a POST request to /api/file/globalCopyFiles specifying an absolute path such as /root/.kube/config or /home/user/.docker/config.json as the source. The incomplete denylist allows the copy to proceed, placing the credential file inside the SiYuan workspace directory. …
Remediation	Upgrade SiYuan to version 3.7.1 (stable) or 3.7.1-alpha.2 (pre-release), both of which contain the fix as confirmed by commits 914c5180a88d17f6d38716a56483327b367ef55f and b54fee401799d987d2fd2888220938ad599b8c5e. … Detailed patch versions, workarounds, and compensating controls in full report.