{"vulnerability": "CVE-2026-72795", "sightings": [{"uuid": "d41d5c69-ab92-4f00-b806-ad5d35dd74d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72795", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msw5ylszbj2p", "content": "CVE-2026-72795 - siyuan\nVersions of SiYuan before 3.7.4 allow unauthorized access to sensitive content. This is a security risk because it lets attackers view documents that should be hidden or protected.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#siyuan #siyuannote #CVE #infosec", "creation_timestamp": "2026-08-12T22:20:03.661027Z"}, {"uuid": "bb3a38af-df90-4fa2-b56a-dd42c7f0af17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72795", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-h6w7-xxcf-w2mq", "content": "", "creation_timestamp": "2026-09-04T22:35:07.726777Z"}, {"uuid": "943447b5-2b4b-46c1-a239-8da9fbaa7a25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72795", "type": "seen", "source": "https://gist.github.com/alon710/d6618765d21c6f9ee71dda70fcd7fb39", "content": "# CVE-2026-72795: CVE-2026-72795: Missing Authorization in SiYuan Block DOM Rendering\n\n> **CVSS Score:** 9.2\n> **Published:** 2026-09-04\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72795\n\n## Summary\nCVE-2026-72795 is a critical missing authorization vulnerability (CWE-862) in SiYuan, a self-hosted personal knowledge platform. When configured in publish/read-only mode, the application fails to validate publish-access rules on dynamic child blocks transcluded via SQL queries. This allows anonymous external visitors to access hidden, password-protected, or forbidden note content.\n\n## TL;DR\nUnauthenticated information exposure in SiYuan note platform allows remote anonymous attackers to view private note content via missing authorization checks in dynamic block transclusion endpoints.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862 (Missing Authorization)\n- **Attack Vector**: Network\n- **CVSS v4.0 Score**: 9.2\n- **EPSS Score**: 0.00241\n- **Exploit Status**: PoC / Technical Analysis\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan personal knowledge-management platform\n- **siyuan**: < 3.7.4 (Fixed in: `3.7.4`)\n\n## Mitigation\n\n- Upgrade SiYuan to version 3.7.4 or later.\n- Disable public publishing or dynamic embeds on public-facing documents.\n- Enforce reverse-proxy authenticated access.\n\n**Remediation Steps:**\n1. Identify any active public documents in the SiYuan instance.\n2. Temporarily disable public sharing or block embed components.\n3. Pull the latest Docker image or binary package for SiYuan >= v3.7.4.\n4. Restart the instance and verify the access-control validation on published pages.\n\n## References\n\n- [GHSA-h6w7-xxcf-w2mq: Security Advisory](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h6w7-xxcf-w2mq)\n- [VulnCheck Vulnerability Report](https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-embed-block)\n- [Fix Commit 1ca1c3c](https://github.com/siyuan-note/siyuan/commit/1ca1c3c9d94bea14fc9728ff2fb8392bb0f29732)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72795) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-05T06:34:06.728269Z"}]}