CVE-2026-68585
Received Received - Intake

SiYuan Metadata Disclosure via Block API

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: VulnCheck

Description
SiYuan versions before v3.7.3 contain a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint that returns document root metadata including title for publish-forbidden documents without publish-access checks. Anonymous readers or publish RoleReader tokens can supply a block ID to retrieve the title, notebook, path, root ID, and icon of documents administrators marked as excluded from publishing.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-68585
EUVD
EUVD-2026-52273

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SiYuan versions before v3.7.3 have a metadata disclosure vulnerability in the /api/block/getBlockInfo endpoint. This flaw allows anonymous users or those with limited publish access to retrieve metadata for documents marked as excluded from publishing. The endpoint returns sensitive information like document titles, notebooks, paths, root IDs, and icons without proper access checks.

Detection Guidance

To detect this vulnerability, check if the /api/block/getBlockInfo endpoint is accessible without proper authentication. Use tools like curl to send requests to the endpoint with a block ID and verify if metadata like document titles is returned for restricted documents. Example command: curl -X GET http://<target>/api/block/getBlockInfo?blockId=<block_id>

Impact Analysis

This vulnerability could expose sensitive document metadata to unauthorized users. Attackers might use this information to identify and target specific documents, potentially leading to further exploitation or data breaches. It undermines access controls and could facilitate phishing or social engineering attacks.

Compliance Impact

This vulnerability may violate compliance requirements by exposing sensitive metadata without authorization. GDPR requires protecting personal data, and HIPAA mandates safeguarding health information. Unauthorized access to document metadata could lead to regulatory penalties and loss of trust.

Mitigation Strategies

Immediately upgrade SiYuan to version v3.7.3 or later to patch the vulnerability. Ensure proper access controls are enforced on the /api/block/getBlockInfo endpoint to prevent unauthorized metadata disclosure. Review and restrict anonymous access or publish RoleReader tokens.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68585. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart