CVE-2026-72788

EUVD-2026-57448
SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrator's open documents, search terms, notebook paths, and private asset locations by calling the getConf endpoint without authentication.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.8 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Common Weakness Enumeration
References
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw
https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-uilayout-filter
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw