CVE-2026-72797

Deferred Deferred - Pending Action

SiYuan Information Disclosure via Unfiltered Notebook Status Endpoint

Publication date: 2026-08-12

Last updated on: 2026-08-26

Assigner: VulnCheck

Description

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint that returns encrypted notebook identifiers, names, and lock states without publish-access filtering. Anonymous readers and publish-mode accounts can enumerate all encrypted notebooks and their current unlock status, revealing sensitive notebook names and decryption state in memory.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-26

Generated

2026-09-02

AI Q&A

2026-08-13

EPSS Evaluated

2026-08-31

NVD

CVE-2026-72797

EUVD

EUVD-2026-57457

Affected Vendors & Products

Vendor	Product	Version / Range
siyuan	siyuan	to 3.7.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability affects SiYuan versions before v3.7.4. The getEncryptedNotebookStatus endpoint exposes encrypted notebook identifiers, names, and lock states without proper authorization. Anonymous users or those in publish mode can access this sensitive data, revealing notebook names and decryption states in memory.

Detection Guidance

To detect this vulnerability, check if your SiYuan instance is running a version before v3.7.4. Use commands like 'curl http://localhost:6806/getEncryptedNotebookStatus' to test if the endpoint exposes encrypted notebook details without authentication. Monitor network traffic for unauthorized access attempts to this endpoint.

Impact Analysis

Attackers could enumerate all encrypted notebooks, learn their names, and determine which are currently decrypted in memory. This leaks sensitive information about notebook topics and indicates when encrypted data is accessible, potentially aiding further attacks.

Compliance Impact

This vulnerability likely violates confidentiality requirements in GDPR and HIPAA by exposing sensitive notebook names and decryption states. It undermines encryption's purpose, risking unauthorized data access and non-compliance with privacy regulations.

Mitigation Strategies

Upgrade SiYuan to version v3.7.4 or later immediately. If upgrading is not possible, restrict access to the getEncryptedNotebookStatus endpoint via network firewall rules or disable publish mode until patched. Review logs for unauthorized access attempts to this endpoint.

Hi! I’m here to help you understand CVE-2026-72797. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70