SiYuan CVE-2026-72801

Exploitation requires that the SiYuan instance has publish mode explicitly configured and enabled - this is a non-default deployment mode intended for sharing notebooks with external audiences. Without publish mode active, the vulnerable endpoints are not exposed and the attack path does not exist. The CVSS 4.0 vector (AV:N/AC:L/PR:N/UI:N) confirms that once publish mode is on, no authentication, user interaction, or protocol-level attack prerequisites are required - any network-reachable attacker can retrieve the key material. The primary factors limiting exploitation are: (1) publish mode is not a default configuration and must be consciously enabled by the user; (2) offline cracking success is bounded by master-password entropy, with long random passwords requiring substantially more compute even with Argon2id parameters disclosed; (3) the attacker must have network-level access to the SiYuan instance, which may be restricted to internal networks.

The CVSS 4.0 score of 8.7 (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H) accurately reflects severity: the disclosure endpoint is remotely reachable, requires no authentication, and yields material sufficient to decrypt notebook contents if the master password is cracked. The practical risk is meaningfully gated by one condition: publish mode must be explicitly enabled by the user, which is not a default configuration. This narrows the real-world attack surface to SiYuan instances intentionally exposed for public sharing. No CISA KEV listing is present and no EPSS data was provided in the input, so exploitation prevalence is not independently confirmed - exploitation status is assessed as no public exploit identified at time of analysis. The offline cracking step introduces a dependency on password strength: strong, high-entropy master passwords substantially raise the cracking barrier even when Argon2id parameters are known. Overall, this is a high-priority patch for any deployment with publish mode active but does not represent universal urgency for the broader SiYuan user base.

An attacker scans the internet for SiYuan instances in publish mode, identifies a target, and sends a single unauthenticated HTTP GET request to the key-material endpoint, receiving the Argon2id salt, cost parameters, password verifier, and wrapped notebook keys in response. Using this material, the attacker configures an offline Argon2id cracking tool with the exact cost parameters from the target and begins a dictionary or brute-force campaign - with no rate limiting or account lockout to impede progress. If the master password is cracked, the wrapped notebook data keys are decrypted and all encrypted notebook content is exposed.