CVE-2026-32747

SiYuan is a personal knowledge management system. In versions 3.6.0 and below, the globalCopyFiles API eads source files using filepath.Abs() with no workspace boundary check, relying solely on util.IsSensitivePath() whose blocklist omits /proc/, /run/secrets/, and home directory dotfiles. An admin can copy /proc/1/environ or Docker secrets into the workspace and read them via the standard file API. An admin can exfiltrate any file readable by the SiYuan process that falls outside the incomplete blocklist. In containerized deployments this includes all injected secrets and environment variables - a common pattern for passing credentials to containers. The exfiltrated files are then accessible via the standard workspace file API and persist until manually deleted. This issue has been fixed in version 3.6.1.

• CWE-22
• CWE-184

• https://github.com/siyuan-note/siyuan/commit/9914fd1d39e5f0a8dcc9fb587e1c0b46f31490a1Patch
• https://github.com/siyuan-note/siyuan/releases/tag/v3.6.1Release Notes
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h5vh-m7fg-w5h6Exploit, Vendor Advisory
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-h5vh-m7fg-w5h6Exploit, Vendor Advisory

Published

Mar 19, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-32740libheif is a HEIF and AVIF file format decoder and encoder. …8.8
• CVE-2026-32741libheif is a HEIF and AVIF file format decoder and encoder. …7.1
• CVE-2026-32742Parse Server is an open source backend that can be deployed …4.3
• CVE-2026-32743PX4 is an open-source autopilot stack for drones and unmanne…6.5
• CVE-2026-32745In JetBrains Datalore before 2026.1 session hijacking was po…5.7
• CVE-2026-32746telnetd in GNU inetutils through 2.7 allows an out-of-bounds…9.8
• CVE-2026-32748Squid is a caching proxy for the Web. Prior to version 7.5, …7.5
• CVE-2026-32749SiYuan is a personal knowledge management system. In version…9.1
• CVE-2026-3275A weakness has been identified in Tenda F453 1.0.0.3. This a…8.8
• CVE-2026-32750SiYuan is a personal knowledge management system. In version…6.8
• CVE-2026-32751SiYuan is a personal knowledge management system. In version…9
• CVE-2026-32752FreeScout is a free help desk and shared inbox built with PH…8.1