CVE-2026-40259

SiYuan is an open-source personal knowledge management system. In versions 3.6.3 and below, the /api/av/removeUnusedAttributeView endpoint is protected only by generic authentication that accepts publish-service RoleReader tokens. The handler passes a caller-controlled id directly to a model function that unconditionally deletes the corresponding attribute view file from the workspace without verifying that the caller has write privileges or that the target attribute view is actually unused. An authenticated publish-service reader can permanently delete arbitrary attribute view definitions by extracting publicly exposed data-av-id values from published content, causing breakage of database views and workspace rendering until manually restored. This issue has been fixed in version 3.6.4.

• CWE-285

• https://github.com/siyuan-note/siyuan/releases/tag/v3.6.4Release Notes
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7m5h-w69j-qgggExploit, Third Party Advisory
• https://github.com/siyuan-note/siyuan/security/advisories/GHSA-7m5h-w69j-qgggExploit, Third Party Advisory

Published

Apr 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-40253openCryptoki is a PKCS#11 library and provides tooling for L…6.1
• CVE-2026-40254FreeRDP is a free implementation of the Remote Desktop Proto…6.1
• CVE-2026-40255AdonisJS HTTP Server is a package for handling HTTP requests…6.1
• CVE-2026-40256Weblate is a web based localization tool. In versions prior …5
• CVE-2026-40257OP-TEE is a Trusted Execution Environment (TEE) designed as …5.5
• CVE-2026-40258The Gramps Web API is a Python REST API for the genealogical…9.1
• CVE-2026-4026A security vulnerability has been identified in FlexNet Mana…8.7
• CVE-2026-40260pypdf is a free and open-source pure-python PDF library. In …5.3
• CVE-2026-40261Composer is a dependency manager for PHP. Versions 1.0 throu…8.8
• CVE-2026-40262Note Mark is an open-source note-taking application. In vers…8.7
• CVE-2026-40263Note Mark is an open-source note-taking application. In vers…3.7
• CVE-2026-40264OpenBao is an open source identity-based secrets management …2.7