{"uuid": "cb00c9ab-9f2d-4cde-9839-18f79b89468e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72797", "type": "seen", "source": "https://gist.github.com/alon710/9a2d85ba8ea8d9357fd9b222ff82f01a", "content": "# CVE-2026-72797: CVE-2026-72797: Missing Authorization in SiYuan Notebook Metadata Endpoint\n\n> **CVSS Score:** 6.9\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72797\n\n## Summary\nAn information disclosure vulnerability exists in SiYuan prior to v3.7.4 due to missing authorization checks on the getEncryptedNotebookStatus API endpoint, allowing unprivileged or anonymous users to enumerate protected notebooks.\n\n## TL;DR\nUnauthenticated remote attackers can query the /api/notebook/getEncryptedNotebookStatus endpoint to discover sensitive notebook names, IDs, and lock states.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 6.9 (Medium)\n- **Exploit Status**: Proof-of-Concept (via tests)\n- **CISA KEV Status**: Not Listed\n- **Impact**: Sensitive Metadata Leakage\n\n## Affected Systems\n\n- SiYuan Personal Knowledge Management System\n- **SiYuan**: < 3.7.4 (Fixed in: `3.7.4`)\n\n## Mitigation\n\n- Update SiYuan to v3.7.4 or later\n- Restrict access to the local or server-side API port using network security groups\n- Disable public/anonymous reading features if not required\n\n**Remediation Steps:**\n1. Verify current running version of SiYuan using the settings menu or container tags.\n2. Download and apply the update to version 3.7.4 or higher.\n3. Verify endpoint restriction by executing a request using a non-admin token and ensuring a 403 Forbidden status is returned.\n\n## References\n\n- [GitHub Security Advisory GHSA-f2rw-w22v-54vh](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-f2rw-w22v-54vh)\n- [Fix Commit (GitHub)](https://github.com/siyuan-note/siyuan/commit/8fb1b5766093371f6a516c221c92026b904fe779)\n- [CVE.org Record](https://www.cve.org/CVERecord?id=CVE-2026-72797)\n- [VulnCheck Security Advisory](https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-getencryptednotebookstatus)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72797) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-05T08:31:47.875616Z"}