{"id":"CVE-2026-72788","kind":"vulnerability","aliases":["CVE-2026-72788","GHSA-hgfg-j9pg-43xw","GO-2026-6622"],"related":[],"title":"SiYuan discloses an administrator's open documents and search terms to anonymous readers in github.com/siyuan-note/siyuan/kernel","description":"SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrator's open documents, search terms, notebook paths, and private asset locations by calling the getConf endpoint without authentication.","summary":"SiYuan, a note-taking app, exposes the administrator's open documents, search terms, notebook paths and private asset locations to anonymous users through its getConf endpoint. An attacker with no account can read this workspace state, but not the note contents themselves.","severity":"medium","cvss":6.9,"epss":0.00413,"exploited":false,"exploited_at":null,"products":[{"name":"github.com/siyuan-note/siyuan/kernel","fixed":["0.0.0-20260812083335-251596fc0de2"],"affected":"< 0.0.0-20260812083335-251596fc0de2","ecosystem":"go"}],"ecosystems":["go"],"tags":["go","package","publish-mode","self-hosted","siyuan"],"not_affected_if":["auth-required","managed-hosting","not-publishing"],"how_to_check":"Run the SiYuan kernel and request getConf without a session, e.g. curl -X POST http://HOST:6806/api/system/getConf (unknown whether that is the exact route in every build).\nCheck the installed version is below v3.7.4 (the Go module version is 0.0.0-20260812083335-251596fc0de2 or newer for the fix).","fix":"Upgrade SiYuan to v3.7.4 or later (Go module 0.0.0-20260812083335-251596fc0de2 or newer).\nIf publish mode is used, make sure the admin workspace is not exposed to readers until upgraded.","status":"open","published_at":"2026-08-12T20:17:50+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","triaged_at":"2026-10-23T21:46:03+00:00","updated_at":"2026-10-23T21:46:03+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T21:46:03Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade SiYuan to v3.7.4 or later (Go module 0.0.0-20260812083335-251596fc0de2 or newer).\nIf publish mode is used, make sure the admin workspace is not exposed to readers until upgraded.","reach":"internet","impact":"low","summary":"SiYuan, a note-taking app, exposes the administrator's open documents, search terms, notebook paths and private asset locations to anonymous users through its getConf endpoint. An attacker with no account can read this workspace state, but not the note contents themselves.","category":"package","who_cares":["siyuan","self-hosted","go","publish-mode"],"confidence":0.7,"needs_auth":"no","worst_case":"Anonymous readers learn admin's open documents, search terms and asset paths","analyst_note":"","how_to_check":"Run the SiYuan kernel and request getConf without a session, e.g. curl -X POST http://HOST:6806/api/system/getConf (unknown whether that is the exact route in every build).\nCheck the installed version is below v3.7.4 (the Go module version is 0.0.0-20260812083335-251596fc0de2 or newer for the fix).","needs_analyst":false,"not_affected_if":["managed-hosting","not-publishing","auth-required"],"user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"medium"},"cost_usd":0.000536,"input_tokens":2978,"output_tokens":476,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':19A,27A,30A '-6622':28A '-72788':20A,31A '/siyuan-note/siyuan/kernel':17A,34A '43xw':25A 'account':75B 'administr':4A,52B,104C,115C 'anonym':12A,65B 'app':49B 'asset':62B,125C 'attack':72B,111C 'authent':133C 'call':128C 'contain':90C 'content':85B 'cve':18A,29A 'disclos':2A 'disclosur':93C 'document':7A,55B,118C 'endpoint':70B,131C 'expos':50B 'fail':100C 'filter':98C 'getconf':69B,130C 'ghsa':22A 'ghsa-hgfg-j9pg-43xw':21A 'github.com':16A,33A 'github.com/siyuan-note/siyuan/kernel':15A,32A 'go':26A,35B 'hgfg':23A 'host':42B 'inform':92C 'j9pg':24A 'locat':63B,126C 'mode':39B 'note':47B,84B 'note-tak':46B 'notebook':58B,121C 'open':6A,54B,117C 'packag':36B 'path':59B,122C 'privat':61B,124C 'proper':102C 'publish':38B,108C 'publish-mod':37B 'read':77B 'reader':13A,109C 'restrict':103C 'retriev':113C 'search':9A,56B,119C 'self':41B 'self-host':40B 'siyuan':1A,43B,44B,86C 'state':80B,106C 'take':48B 'term':10A,57B,120C 'uilayout':97C 'unauthent':110C 'user':66B 'v3.7.4':89C 'version':87C 'vulner':94C 'without':132C 'workspac':79B,105C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-08-12T20:17:50+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"govuln","external_id":"GO-2026-6622","url":"https://pkg.go.dev/vuln/GO-2026-6622","severity":null,"published_at":"2026-10-07T14:09:59+00:00","modified_at":"2026-10-07T14:09:59+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","fetched_at":"2026-10-23T19:13:08+00:00","note":null},{"source":"epss","external_id":"CVE-2026-72788","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-72788","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:43+00:00","fetched_at":"2026-10-23T19:13:43+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-72788","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72788","severity":null,"published_at":"2026-08-12T20:17:50+00:00","modified_at":"2026-10-23T19:10:00+00:00","first_seen_at":"2026-10-23T19:35:23+00:00","fetched_at":"2026-10-23T19:35:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}