CVE-2026-72798

Deferred Deferred - Pending Action

SiYuan Path Traversal via Related-Database Content Exposure

Publication date: 2026-08-12

Last updated on: 2026-08-26

Assigner: VulnCheck

Description

SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases. Attackers can request published databases that relate to restricted databases to retrieve sensitive content, or bypass row filtering entirely when the first column is a non-block type.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-12

Last Modified

2026-08-26

Generated

2026-09-02

AI Q&A

2026-08-13

EPSS Evaluated

2026-08-31

NVD

CVE-2026-72798

EUVD

EUVD-2026-57458

Affected Vendors & Products

Vendor	Product	Version / Range
siyuan	siyuan	to 3.7.4 (exc)
siyuan	siyuan	From 0 (inc) to 3.7.4 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2026-72798 is an information disclosure vulnerability in SiYuan versions before v3.7.4. It occurs in the renderAttributeView function, which fails to properly filter content from related databases. This allows anonymous users to access Relation and Rollup cell contents from hidden or password-protected databases through published databases.

Detection Guidance

To detect this vulnerability, check the SiYuan version installed on your system. If it is below v3.7.4, the system is vulnerable. Use commands like 'siyuan --version' or inspect the application's version in the settings. Additionally, review published databases for unexpected access to Relation or Rollup cells from restricted databases.

Impact Analysis

Attackers could exploit this to retrieve sensitive data from restricted databases by requesting published databases linked to them. If the first column is not a block type, row filtering is bypassed entirely, exposing unfiltered rows. This could lead to unauthorized access to confidential information.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating compliance requirements for data protection such as GDPR and HIPAA. It may result in unauthorized access to sensitive personal or health information, leading to legal and regulatory penalties.

Mitigation Strategies

Immediately upgrade SiYuan to version v3.7.4 or later to patch the vulnerability. If upgrading is not possible, restrict database publishing and review all published databases to ensure they do not expose sensitive Relation or Rollup cell contents. Disable access to published databases linked to restricted ones until the update is applied.

Hi! I’m here to help you understand CVE-2026-72798. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70