{"uuid": "1a2388bb-e9a2-4f90-a44a-a19416bb67ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-h6w7-xxcf-w2mq", "type": "seen", "source": "https://gist.github.com/alon710/d6618765d21c6f9ee71dda70fcd7fb39", "content": "# CVE-2026-72795: CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering\n\n> **CVSS Score:** 9.2\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72795\n\n## Summary\nCVE-2026-72795 is a critical missing authorization vulnerability (CWE-862) in SiYuan, a self-hosted personal knowledge platform. When configured in publish/read-only mode, the application fails to validate publish-access rules on dynamic child blocks transcluded via SQL queries. This allows anonymous external visitors to access hidden, password-protected, or forbidden note content.\n\n## TL;DR\nUnauthenticated information exposure in SiYuan note platform allows remote anonymous attackers to view private note content via missing authorization checks in dynamic block transclusion endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization)\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 9.2\n- **EPSS Score**: 0.00241\n- **Exploit Status**: PoC / Technical Analysis\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan personal knowledge-management platform\n- **siyuan**: < 3.7.4 (Fixed in: `3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan to version 3.7.4 or later.\n- Disable public publishing or dynamic embeds on public-facing documents.\n- Enforce reverse-proxy authenticated access.\n\n**Remediation Steps:**\n1. Identify any active public documents in the SiYuan instance.\n2. Temporarily disable public sharing or block embed components.\n3. Pull the latest Docker image or binary package for SiYuan >= v3.7.4.\n4. Restart the instance and verify the access-control validation on published pages.\n\n## References\n\n- [GHSA-h6w7-xxcf-w2mq: Security Advisory](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h6w7-xxcf-w2mq)\n- [VulnCheck Vulnerability Report](https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-embed-block)\n- [Fix Commit 1ca1c3c](https://github.com/siyuan-note/siyuan/commit/1ca1c3c9d94bea14fc9728ff2fb8392bb0f29732)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72795) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-05T06:34:06.797020Z"}