Which versions of SiYuan are affected by CVE-2026-72795?

SiYuan note-taking software before version 3.7.4 contains a critical vulnerability (CVE-2026-72795) that allows unauthorized access to password-protected and hidden notes without credentials.. A patch is available.

Is there a public PoC exploit available for CVE-2026-72795?

Yes, a public proof-of-concept exploit is available for CVE-2026-72795. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2026-72795?

Within 24 hours, audit your SiYuan deployment to identify all instances and classify the sensitivity of stored content; review access logs for suspicious queries to the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Within 7 days, restrict network access to SiYuan instances to trusted internal networks only, disable embed functionality if operationally feasible, and implement enhanced alerting on vulnerable endpoints. Monitor vendor advisories continuously; upon release of SiYuan version 3.7.4 or later, deploy the patch immediately to all instances storing sensitive data, completing deployment within 30 days of vendor release.

SiYuan CVE-2026-72795

Q: What is the CVSS score of CVE-2026-72795?

CVE-2026-72795 has a CVSS 4.0 base score of 9.2 (Critical). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-57455 CRITICAL

Missing Authorization (CWE-862)

2026-08-12 VulnCheck

GHSA-cjwm-9h7g-pcr9

GHSA-h6w7-xxcf-w2mq

Authentication Bypass Siyuan Siyuan Note

9.2

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

9.2 CRITICAL

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

8.6 HIGH

Network-reachable published endpoint needs no auth or interaction (AV:N/AC:L/PR:N/UI:N); it discloses data across an authorization boundary (S:C, C:H) with no integrity or availability impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Patch available

Aug 12, 2026 - 20:03 EUVD

Analysis Generated

Aug 12, 2026 - 19:57 vuln.today

CVE Published

Aug 12, 2026 - 19:07 cve.org

CRITICAL 9.2

DescriptionCVE.org

SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints. Attackers can request published blocks containing embed queries to read content from password-protected, hidden, or forbidden documents without authorization.

AnalysisAI

Unauthorized cross-document content disclosure in SiYuan note-taking software before v3.7.4 allows remote attackers to read protected notes without credentials. The getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints resolve embed queries inside published blocks without re-checking publish-access controls, so an attacker who reaches a published SiYuan workspace can pull back content from password-protected, hidden, or forbidden documents. No public exploit identified at time of analysis, but VulnCheck rates it CVSS 9.2 (CVSS 4.0) and it constitutes an authentication/authorization bypass.

Technical ContextAI

SiYuan is a self-hostable, block-based personal knowledge-management (PKM) application (similar in concept to Obsidian or Notion) that includes a 'publish' mode exposing selected documents over the network. Documents are composed of blocks, and 'embed' blocks run queries that dynamically pull in the content of other blocks. The flaw is a CWE-862 Missing Authorization: when the getBlockDOMWithEmbed / getBlockDOMsWithEmbed endpoints render a published block, they execute the embedded query and return the results without filtering those results through the same publish-access policy that governs direct document access. As a result the authorization boundary is enforced on the container document but not on the transitively embedded content. The affected component is identified by CPE cpe:2.3:a:siyuan-note:siyuan:*, covering all versions prior to the fixed v3.7.4.

RemediationAI

Vendor-released patch: v3.7.4 - upgrade all SiYuan instances to v3.7.4 or later, which restores publish-access filtering on embedded block content; see the advisory at https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h6w7-xxcf-w2mq. If you cannot upgrade immediately, disable SiYuan's publish/sharing feature or take the published workspace off the network so the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints are not reachable by untrusted clients - the trade-off is that legitimate published sharing stops working. As an interim compensating control, place the published instance behind an authenticating reverse proxy or IP allowlist so only trusted users reach it, and avoid using embed queries that pull from password-protected, hidden, or forbidden documents until patched, since those are the specific blocks whose content leaks.