CVE-2026-33476

HIGH

7.5

Description

SiYuan is a personal knowledge management system. Prior to version 3.6.2, the Siyuan kernel exposes an unauthenticated file-serving endpoint under `/appearance/*filepath.` Due to improper path sanitization, attackers can perform directory traversal and read arbitrary files accessible to the server process. Authentication checks explicitly exclude this endpoint, allowing exploitation without valid credentials. Version 3.6.2 fixes this issue.

Details CVE

Score CVSS v3.17.5

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/20/2026

Derniere modification3/23/2026

Sourcenvd

Observations honeypot0

Produits affectes

b3log:siyuan

Faiblesses (CWE)

CWE-22CWE-73

References

https://github.com/siyuan-note/siyuan/commit/009bb598b3beccc972aa5f1ed88b3b224326bf2a(security-advisories@github.com)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hhgj-gg9h-rjp7(security-advisories@github.com)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hhgj-gg9h-rjp7(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.