← CVE Intelligence

CVE-2026-45148

SiYuan: Broken access control in SiYuan publish-mode Readers can enumerate metadata PUBLISHED

Description (CNA)

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, broken access control in the searchAsset, searchTag, searchWidget, and searchTemplate publish-mode Readers can enumerate metadata from documents that are invisible to the publish service. This vulnerability is fixed in 3.7.0.

Affected (CNA)

Vendor / productVersions
siyuan-note / siyuanaffected < 3.7.0

CWE

CWE-863

References

ADP enrichment

CISA-ADP

No English description supplied.