Skip to content
Threat Feed
Subscribe

Product

Siyuan

6 briefs RSS
high advisory

Path Traversal in SiYuan Export Functionality

SiYuan versions prior to v3.8.4 are vulnerable to a path traversal attack via the exportBrowserHTML endpoint, allowing authenticated administrators to overwrite arbitrary index.html files.

SiYuan +3 web-vulnerability xss rce electron webserver sql-injection api-security
2r 5t 1c updated
high advisory

SiYuan Publish-Mode Reader Configuration and Index Mutation Vulnerability

SiYuan publish-mode Reader can mutate Conf and SQL index via 8 ungated APIs, leading to configuration changes, denial of service, data corruption, and information disclosure by manipulating cloud sync intervals, graph configurations, SQL block content, and recent-documents lists.

siyuan misconfiguration unauthorized_access data_manipulation
2r 1t
high advisory

SiYuan Path Traversal via Double URL Encoding in `/export/` Endpoint

SiYuan is vulnerable to path traversal via double URL encoding in the `/export/` endpoint, bypassing an incomplete fix for CVE-2026-30869; an authenticated attacker can exploit this vulnerability to traverse directories and read arbitrary workspace files, including the SQLite database (`siyuan.db`), kernel log, and user documents due to a redundant `url.PathUnescape()` call in `serveExport()`.

siyuan path-traversal web-application
2r 1t 1c 1i
critical threat

Critical RCE Vulnerability in Langflow AI Pipelines (CVE-2026-33017)

A critical remote code execution vulnerability, CVE-2026-33017, exists in Langflow AI pipelines prior to version 1.9.0 that allows an unauthenticated remote attacker to execute code with full server process privileges, impacting availability, integrity, and confidentiality.

exploited PoC Siyuan +6 langflow rce cve-2026-33017 ai-pipeline
2r 2t 1c 1i updated
critical advisory

SiYuan Path Traversal Vulnerability (CVE-2026-40318)

SiYuan versions 3.6.3 and prior are vulnerable to path traversal (CVE-2026-40318), allowing attackers to delete arbitrary .json files on the server via the /api/av/removeUnusedAttributeView endpoint.

SiYuan path-traversal vulnerability
3r 1t 1c
high advisory

SiYuan Unauthorized Attribute View Deletion Vulnerability (CVE-2026-40259)

SiYuan versions 3.6.3 and below are vulnerable to unauthorized attribute view deletion via the /api/av/removeUnusedAttributeView endpoint, allowing authenticated users with publish-service RoleReader tokens to delete arbitrary attribute view definitions, leading to database view breakage and workspace rendering issues.

SiYuan attribute-deletion vulnerability webserver
2r 1c