by Kastro
Paper/Archive/CVE-2026-72789

CVE-2026-72789

siyuan-note siyuan — SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks

EPSS 0.4%public exploitCVSS 9.2
critical.is priorityof 100
44
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 30.8.308 × 206.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default. Anonymous readers can enumerate and retrieve fully decrypted document content from unlocked encrypted notebooks through the publish API without authentication or key material.

Affected

ProductAffectedFixed inSource
siyuan< 3.7.43.7.4CNA

Scores by source

VulnCheck (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
VulnCheck (CNA)8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

exploitgithub.com/siyuan-note/siyuan/security/advisories/GHSA-v684-q882-jgmqwriteupvulncheck.com/advisories/siyuan-before-authentication-bypass-via-encrypted-notebooks