Vulnerability · Published Aug 17, 2026 · Assigned by VulnCheck

CVE-2026-74802SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy

High 8.2

In plain English

A high-severity security flaw in siyuan from siyuan-note. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)8.2High

Exploit odds (30 days)0.2%top 94.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

SiYuan versions before 3.7.4 contain a cross-site WebSocket hijacking vulnerability in the admin-only /ws/network/proxy endpoint that explicitly disables origin validation by setting CheckOrigin to unconditionally return true. Attackers can craft malicious webpages that establish WebSocket connections to this endpoint and direct the SiYuan kernel process to proxy arbitrary network traffic to attacker-chosen targets, enabling authenticated network pivoting through the victim's machine.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/siyuan-note/siyuan/kernel	0.0.0-20260803045322-cb67e0b4fab5	GHSA-3cc2-h3v6-rqpq
Go	github.com/siyuan-note/siyuan/kernel	0.0.0-20260803045322-cb67e0b4fab5	GO-2026-6650

Affected products (as reported)

Vendor	Product	Versions
siyuan-note	siyuan	0 – before 3.7.4

Weakness: CWE-346 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

References

GitHub Security Advisory (GHSA-3cc2-h3v6-rqpq) vendor-advisory
VulnCheck Advisory: SiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy third-party-advisory