EUVD-2026-17675
GHSA-rx4h-526q-4458
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Primary rating from Vendor (github).
CVSS VectorVendor: github
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
SiYuan is a personal knowledge management system. Prior to version 3.6.2, an attacker who can place a malicious URL in an Attribute View mAsse field can trigger stored XSS when a victim opens the Gallery or Kanban view with “Cover From -> Asset Field” enabled. The vulnerable code accepts arbitrary http(s) URLs without extensions as images, stores the attacker-controlled string in coverURL, and injects it directly into an <img src="..."> attribute without escaping. In the Electron desktop client, the injected JavaScript executes with nodeIntegration enabled and contextIsolation disabled, so the XSS reaches arbitrary OS command execution under the victim’s account. This issue has been patched in version 3.6.2.
AnalysisAI
Stored cross-site scripting (XSS) in SiYuan personal knowledge management system escalates to arbitrary operating system command execution on desktop clients. Authenticated attackers with low privileges can inject malicious URLs into Attribute View asset fields that execute JavaScript when victims view Gallery or Kanban layouts with "Cover From -> Asset Field" enabled. The Electron desktop client's configuration (nodeIntegration enabled, contextIsolation disabled) allows the XSS payload to break sandbox boundaries and execute arbitrary commands under the victim's OS account. CVSS 9.0 (Critical) with network attack vector, low complexity, and cross-scope impact. Vendor-released patch: version 3.6.2. No public exploit identified at time of analysis, though technical details are disclosed in GitHub advisory GHSA-rx4h-526q-4458.
Technical ContextAI
SiYuan is an Electron-based personal knowledge management application combining note-taking with knowledge graph features. The vulnerability (CWE-79: Improper Neutralization of Input During Web Page Generation) stems from insufficient input validation in the Attribute View component's asset field handler. The application accepts arbitrary HTTP(S) URLs without file extension validation, storing attacker-controlled strings directly in the coverURL variable. When rendering Gallery or Kanban views with asset-based cover images, this unsanitized data is injected into HTML img src attributes without contextual output encoding. The severity escalates significantly in the Electron desktop environment due to unsafe webview configuration: nodeIntegration is enabled (allowing renderer processes to access Node.js APIs) and contextIsolation is disabled (permitting JavaScript in rendered content to access Electron and Node.js contexts directly). This configuration violates Electron security best practices and transforms a typical stored XSS into a complete sandbox escape, granting attackers full Node.js capabilities including child_process execution and filesystem access.
RemediationAI
Upgrade immediately to SiYuan version 3.6.2 or later, released by the vendor to address this vulnerability. The patch implements proper input validation for asset field URLs and contextual output encoding when rendering cover images in Gallery and Kanban views. Download the patched release from the official GitHub repository at https://github.com/siyuan-note/siyuan/releases/tag/v3.6.2, verifying release signatures where available. Desktop client users should prioritize this update due to the command execution risk. Until patching is complete, avoid enabling "Cover From -> Asset Field" in Gallery or Kanban views, and review existing Attribute View configurations for suspicious or unexpected HTTP(S) URLs in asset fields that lack recognized image file extensions. In multi-user or shared workspace scenarios, audit recent asset field modifications via the issue reference at https://github.com/siyuan-note/siyuan/issues/17246 for indicators of attempted exploitation. No effective workaround exists beyond disabling the vulnerable feature or restricting access to trusted users only.
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Cross-site scripting (XSS) in SiYuan personal knowledge management system versions 3.6.0-3.6.1 allows remote attackers t
Arbitrary file disclosure in SiYuan personal knowledge management system before 3.7.0 lets an unauthenticated remote att
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today