Is there a patch available for CVE-2026-72788?

Yes, a patch is available for CVE-2026-72788. Update the affected software to the latest version immediately.

SiYuan CVE-2026-72788

Q: What is the CVSS score of CVE-2026-72788?

CVE-2026-72788 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-57448 MEDIUM

Incorrect Authorization (CWE-863)

2026-08-12 VulnCheck

GHSA-hpmw-8pgp-x77j

Authentication Bypass Information Disclosure Siyuan Siyuan Note

6.9

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

5.3 MEDIUM

Unauthenticated network call to an unprotected endpoint yields low-severity metadata disclosure with no integrity, availability, or scope-change impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Aug 12, 2026 - 20:09 vuln.today

Patch available

Aug 12, 2026 - 20:03 EUVD

DescriptionCVE.org

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrator's open documents, search terms, notebook paths, and private asset locations by calling the getConf endpoint without authentication.

AnalysisAI

Information disclosure in SiYuan before v3.7.4 exposes administrator workspace state to unauthenticated network attackers via an improperly protected getConf API endpoint. The UILayout filter fails to enforce authorization boundaries between publish readers and the administrative configuration layer, leaking open document names, recent search terms, notebook directory paths, and private asset locations. No public exploit code or CISA KEV listing exists at time of analysis; however, the unauthenticated network vector makes the flaw trivially reachable on any internet-exposed SiYuan instance with publish features active.

Technical ContextAI

SiYuan is a self-hosted, open-source personal knowledge management system with a publish/share feature that allows workspace content to be surfaced to external readers. The vulnerability is classified under CWE-863 (Incorrect Authorization): the UILayout filter that governs what state is surfaced to publish-reader sessions fails to exclude administrative configuration data, allowing the getConf system endpoint to respond with sensitive workspace metadata to callers presenting no credentials. All versions captured by CPE cpe:2.3:a:siyuan-note:siyuan:*:*:*:*:*:*:*:* prior to 3.7.4 contain this flaw. The root cause is a missing or insufficiently scoped authorization check on a server-side API endpoint that was designed for authenticated administrative access only.

RemediationAI

Upgrade SiYuan to v3.7.4 or later, which resolves the UILayout filter authorization defect per the vendor security advisory at https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw. If immediate patching is not feasible, disable the publish/share feature entirely to eliminate unauthenticated access to the API surface - this removes the attack surface at the cost of losing all public document sharing capability. Alternatively, place the SiYuan instance behind an authenticating reverse proxy (such as nginx with HTTP basic auth or an SSO gateway) to require credentials before any API endpoint is reachable; this prevents unauthenticated getConf calls but adds operational overhead. As a minimum compensating control, restrict inbound network access to the SiYuan port to trusted IP ranges via firewall rules, preventing opportunistic external access to the getConf endpoint.