EUVD-2026-39124
GHSA-gcm7-57gf-953c
Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AV:A reflects the network-adjacent attacker characterization in the description; AC:H reflects the valid block ID prerequisite; PR:N confirmed by explicit auth exemption in router.
Primary rating from Vendor (GitHub_M).
CVSS VectorVendor: GitHub_M
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Lifecycle Timeline
2DescriptionCVE.org
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDynamicIcon endpoint is explicitly excluded from authentication in SiYuan's kernel router (router.go, "不需要鉴权" -- no auth needed). When called with type=8 and a valid block id parameter, this endpoint invokes RenderDynamicIconContentTemplate, which executes a Go template that includes the querySQL and queryBlocks functions. These functions run arbitrary SELECT statements against the SiYuan SQLite database. An unauthenticated network-adjacent attacker who knows a valid block ID can exfiltrate all user note content, tags, asset references, and block attributes from the database. This vulnerability is fixed in 3.7.0.
AnalysisAI
SiYuan's personal knowledge management system prior to 3.7.0 exposes all user note content to unauthenticated database exfiltration through a deliberately auth-excluded API endpoint. The /api/icon/getDynamicIcon endpoint, when invoked with type=8 and a valid block ID, renders a Go template that executes arbitrary SELECT queries against SiYuan's SQLite backend via querySQL and queryBlocks functions - functions designed for note querying but reachable without any credential check. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires two concrete conditions: (1) the attacker must have network reachability to SiYuan's HTTP API port - the description characterizes this as network-adjacent, meaning the same LAN segment or a SiYuan instance that has been bound to a non-loopback interface; and (2) the attacker must supply a valid SiYuan block ID in the request parameter. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The provided CVSS 3.1 score of 5.9 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) captures the core trade-off: the confidentiality impact is high (full database read), but exploitation complexity is elevated because a valid block ID must be known in advance. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker on the same local network as a SiYuan instance - or one who has obtained a valid SiYuan block ID through a shared note link or prior reconnaissance - sends a crafted unauthenticated GET request to `/api/icon/getDynamicIcon?type=8&id=<blockID>`. The endpoint renders a Go template invoking `querySQL` against the SQLite database without any credential check, and the full contents of the user's notes, tags, and metadata are returned in the response. … |
| Remediation | The primary fix is to upgrade SiYuan to version 3.7.0 or later, which resolves the missing authentication guard on the `/api/icon/getDynamicIcon` endpoint. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Cross-site scripting (XSS) in SiYuan personal knowledge management system versions 3.6.0-3.6.1 allows remote attackers t
Arbitrary file disclosure in SiYuan personal knowledge management system before 3.7.0 lets an unauthenticated remote att
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today