{"vulnerability": "cve-2026-72806", "sightings": [{"uuid": "9c5d24f3-2fe2-4db5-b939-285433c75fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-72806", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-6mcf-g667-w3qv", "content": "", "creation_timestamp": "2026-09-04T00:35:23.168261Z"}, {"uuid": "785ec440-2f47-4bd1-ad9c-587e616c5103", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72806", "type": "seen", "source": "https://gist.github.com/alon710/fbf800eaf7af09313d5329c1498b751c", "content": "# CVE-2026-72806: CVE-2026-72806: Missing Authorization in SiYuan Attribute View Rendering Leads to Information Disclosure\n\n> **CVSS Score:** 5.8\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72806\n\n## Summary\nAn authorization bypass vulnerability in SiYuan prior to v3.7.4 allows unauthenticated remote attackers to access rows, block IDs, and custom attributes of password-protected documents via the attribute view rendering endpoint.\n\n## TL;DR\nAn unauthenticated remote attacker can bypass password-protection policies on SiYuan documents by querying database attribute views, leading to sensitive data exposure.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-862\n- **Attack Vector**: Network\n- **CVSS v3.1 Score**: 5.8 (Medium)\n- **EPSS Score**: 0.00307\n- **Impact**: Information Disclosure\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan personal knowledge management platform\n- **SiYuan**: < v3.7.4 (Fixed in: `v3.7.4`)\n\n## Mitigation\n\n- Disable Publish Mode if not strictly necessary.\n- Deploy IP-based ACLs or VPN access to restrict access to the hosting server.\n- Explicitly add sensitive, password-protected documents to the publish-ignore list in vulnerable versions.\n\n**Remediation Steps:**\n1. Verify the current running version of the SiYuan instance.\n2. Download and install the update for SiYuan to version v3.7.4 or later.\n3. Verify that the backend rendering endpoint correctly prompts for a password when querying views containing protected documents.\n\n## References\n\n- [GitHub Security Advisory GHSA-6mcf-g667-w3qv](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-6mcf-g667-w3qv)\n- [SiYuan Fix Commit 768427f20f13bbd8dc4effa8aa4e1d09a7741bf4](https://github.com/siyuan-note/siyuan/commit/768427f20f13bbd8dc4effa8aa4e1d09a7741bf4)\n- [VulnCheck Advisory: SiYuan Authentication Bypass via Attribute View](https://www.vulncheck.com/advisories/siyuan-before-authentication-bypass-via-attribute-view)\n- [CVE Record: CVE-2026-72806](https://www.cve.org/CVERecord?id=CVE-2026-72806)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72806) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T06:33:11.208372Z"}]}