Vulnerability · Published Jul 9, 2026 · Assigned by GitHub_M

CVE-2026-59854SiYuan: Incomplete IsSensitivePath denylist: globalCopyFiles reads home-dir credential dotfiles into the workspace

Medium 4.9

In plain English

A medium-severity security flaw in siyuan from siyuan-note. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 3.1)4.9Medium

Exploit odds (30 days)0.5%top 58.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, POST /api/file/globalCopyFiles accepts attacker-supplied absolute source paths and relies on util.IsSensitivePath in kernel/util/path.go, whose denylist misses common home-directory credential files such as .git-credentials, .netrc, .pgpass, .kube/config, .docker/config.json, and .gnupg, allowing an authenticated administrator or API-token user to copy those files into the workspace and exfiltrate them through the file API. This issue is fixed in versions 3.7.1-alpha.2 and 3.7.1.

Affected products (as reported)

Vendor	Product	Versions
siyuan-note	siyuan	< 3.7.1

Weakness: CWE-693 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

References

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vmm8-3ccv-ppvw x_refsource_CONFIRM
https://github.com/siyuan-note/siyuan/commit/914c5180a88d17f6d38716a56483327b367ef55f x_refsource_MISC
https://github.com/siyuan-note/siyuan/commit/b54fee401799d987d2fd2888220938ad599b8c5e x_refsource_MISC
https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1 x_refsource_MISC