EUVD-2026-57456
GHSA-cm9f-w4h4-7j85
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-reachable with no prerequisites in disabled-auth mode; confidentiality impact is low as only workspace artifacts are exposed, with no integrity or availability impact.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass publish-access controls enforced on the REST API. Attackers with publish reader tokens or anonymous access in disabled-auth mode can read templates, snippets, and export artifacts by directly accessing static routes that lack the same restrictions as their REST API counterparts.
AnalysisAI
Static-route access control bypass in SiYuan before v3.7.4 allows attackers to read sensitive workspace data by directly accessing file-serving routes that skip the authorization checks enforced on the REST API. Affected deployments include any SiYuan instance operating in disabled-auth mode (anonymous access) or where publish reader tokens have been issued, as those token holders can reach templates, snippets, and export artifacts without restriction. No public exploit or active exploitation has been identified at time of analysis, but the patch to v3.7.4 is available and should be applied promptly given the unauthenticated attack vector in disabled-auth configurations.
Technical ContextAI
SiYuan is a local-first, self-hosted personal knowledge management and note-taking application (cpe:2.3:a:siyuan-note:siyuan:*:*:*:*:*:*:*:*). Its server component implements a Go HTTP multiplexer that registers both a REST API and static file-serving routes. The root cause is CWE-862 (Missing Authorization): publish-access guards are applied to REST API handlers but were not applied symmetrically to the static-route handlers that serve the same underlying resources - templates, user snippets, and export artifacts. Because the static routes fall outside the access-control middleware chain, a caller who obtains or forges a publish reader token, or who reaches an instance with authentication entirely disabled, can retrieve files that the access-control model was designed to protect.
RemediationAI
Upgrade SiYuan to v3.7.4 or later, which resolves the missing authorization on static routes. The vendor-released patch is confirmed available per the GitHub security advisory at https://github.com/siyuan-note/siyuan/security/advisories/GHSA-fgmr-7w36-9qfq. As a compensating control for deployments that cannot patch immediately, restrict network access to the SiYuan server port using firewall rules or a reverse proxy with IP allowlisting - this directly removes the network-accessible attack vector. Avoid running SiYuan in disabled-auth mode on any network-reachable interface; if publish access is required, ensure it is scoped to trusted network segments. Note that restricting at the network layer does not fix the underlying authorization flaw and tokens already issued remain a risk if the instance is later re-exposed.
SQL injection in SiYuan personal knowledge management (versions <= v3.7.2) lets attackers pass arbitrary SQL statements
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Reflected XSS in SiYuan knowledge management before 3.5.9.
SiYuan knowledge management system prior to 3.5.5 has a path traversal in /api/file/copyFile allowing arbitrary file ope
SiYuan version 3.0.3 allows executing arbitrary commands on the server. Rated critical severity (CVSS 9.0), this vulnera
SQL injection in SiYuan prior to version 3.6.0 allows any authenticated user, including those with read-only access, to
Cross-site scripting (XSS) in SiYuan personal knowledge management system versions 3.6.0-3.6.1 allows remote attackers t
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today