{"uuid": "e0598767-a3b0-4c2d-9ba5-f5ba1e5b2974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-72804", "type": "seen", "source": "https://gist.github.com/alon710/8322b53a1d7bba7f1109796c874a5f4c", "content": "# CVE-2026-72804: CVE-2026-72804: Authentication Bypass and Sensitive Information Exposure in SiYuan Graph Endpoints\n\n> **CVSS Score:** 9.2\n> **Published:** 2026-09-03\n> **Full Report:** https://cvereports.com/reports/CVE-2026-72804\n\n## Summary\nSiYuan before version 3.7.4 contains an authentication bypass vulnerability within its graph visualization API endpoints, allowing unauthenticated remote attackers to extract sensitive node metadata and content from password-protected documents.\n\n## TL;DR\nUnauthenticated remote attackers can query SiYuan's graph endpoints to bypass password protection and extract private document contents and linkages.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-200\n- **Attack Vector**: Network (AV:N)\n- **CVSS v4.0 Score**: 9.2 (Critical)\n- **EPSS Score**: 0.00255 (16.82%)\n- **Impact**: Confidentiality Exposure (High)\n- **Exploit Status**: PoC Available / Verified\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- SiYuan Knowledge Management Platform\n- **siyuan**: < 3.7.4 (Fixed in: `3.7.4`)\n\n## Mitigation\n\n- Upgrade to SiYuan version 3.7.4 or later to apply context-aware authorization controls.\n- Restrict external access to graph API endpoints using reverse proxies or Web Application Firewalls (WAF).\n- Mark sensitive documents as fully Hidden instead of Password Protected to use visibility-based logic on older versions.\n\n**Remediation Steps:**\n1. Pull the latest Docker image or update the SiYuan package to v3.7.4.\n2. Restart the SiYuan process or container.\n3. Configure reverse proxy block rules for `/api/graph/getGraph` and `/api/graph/getLocalGraph` if an immediate update is unfeasible.\n\n## References\n\n- [GitHub Security Advisory GHSA-vpjw-wf5h-cgpq](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vpjw-wf5h-cgpq)\n- [VulnCheck Intelligence Advisory](https://www.vulncheck.com/advisories/siyuan-before-authentication-bypass-via-graph-endpoints)\n- [Patch Commit](https://github.com/siyuan-note/siyuan/commit/82e9ded423e45eabcc96010abd30c0f96bfe0323)\n- [NVD Portal](https://nvd.nist.gov/vuln/detail/CVE-2026-72804)\n- [CVE.org Portal](https://www.cve.org/CVERecord?id=CVE-2026-72804)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-72804) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-09-04T04:32:14.300172Z"}