{"id":"CVE-2026-72788","revision":null,"records":[{"revision":"54204ba07b2548d6adeb3cac38772b8e","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-72788","aliases":[],"title":"SiYuan before v3.7.4 Information Disclosure via UILayout Filter","description":"SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrator's open documents, search terms, notebook paths, and private asset locations by calling the getConf endpoint without authentication.","state":0,"publishedAt":"2026-08-12T19:07:37.573+00:00","modifiedAt":"2026-08-14T16:51:59.04+00:00","affected":[{"ecosystem":"Vendor product","name":"siyuan","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"siyuan-note\",\n                    \"product\": \"siyuan\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageURL\": \"pkg:golang/github.com/siyuan-note/siyuan/kernel\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"lessThan\": \"3.7.4\"\n                        },\n                        {\n                            \"version\": \"3.7.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","score":6.9,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","score":5.8,"severity":"MEDIUM"}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw","https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-uilayout-filter"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72788","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-72788","identifiers":["CVE-2026-72788"]},"retained":false,"historicalAffected":[]},{"revision":"566089be113144cf95889d0559c8e374","observedAt":"2026-10-25T15:19:03.401+00:00","statement":{"source":"nvd","id":"CVE-2026-72788","aliases":[],"title":"SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrato…","description":"SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers. Unauthenticated attackers can retrieve the administrator's open documents, search terms, notebook paths, and private asset locations by calling the getConf endpoint without authentication.","state":0,"publishedAt":"2026-08-12T20:17:50.117+00:00","modifiedAt":"2026-10-24T15:10:00.19+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · disclosure@vulncheck.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":6.9,"severity":"MEDIUM"},{"system":"CVSS 3.1 · disclosure@vulncheck.com · Primary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","score":5.8,"severity":"MEDIUM"}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw","https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-uilayout-filter"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72788","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-863"],"productCriteria":[],"sourceDates":{"published":"2026-08-12T20:17:50.117","lastModified":"2026-10-24T15:10:00.190"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-72788","identifiers":["CVE-2026-72788"]},"retained":false,"historicalAffected":[]},{"revision":"ba97f404daf842c9ad50cbc6190ad699","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-hgfg-j9pg-43xw","aliases":["CVE-2026-72788","GO-2026-6622"],"title":"SiYuan discloses an administrator's open documents and search terms to anonymous readers","description":"### Summary\n\n`/api/system/getConf` serves `Conf.UILayout` to publish readers after passing it through `FilterConfByPublishIgnore`, whose only function is to filter that layout. The layout is written exclusively by `setUILayout`, which is administrator-gated, so what readers receive is the administrator's own live workspace state, re-saved on every tab open, close and focus change.\n\nThe filter that is supposed to protect it, `filterLayoutItemByPublishIgnore`, has four separate defects. Together they mean a single unauthenticated POST with no arguments returns the titles and identifiers of the administrator's open password-protected documents, the titles of documents in locked or closed notebooks, their recent search terms and the paths those searches were scoped to, and the paths of private assets they have open.\n\nThis report concerns `FilterConfByPublishIgnore` and its layout walker. It is distinct from the previously reported `getConf` issues, which concern configuration fields surviving `HideConfSecret`'s blocklist. Restructuring the secret-masking path would not affect this, because `UILayout` is not a secret to be stripped. It is a field intended to be served and filtered.\n\n### Details\n\n**Route and writer asymmetry.** `kernel/api/router.go:70` registers `POST /api/system/getConf` with `model.CheckAuth` only, so it is reachable by the publish `RoleReader` token and anonymously when `Publish.Auth.Enable` is `false`. The corresponding writer, `setUILayout` at `kernel/api/router.go:67`, carries `CheckAuth`, `CheckAdminRole` and `CheckReadonly`. Only an administrator can write this state, and any reader can read it.\n\n**The filter exists and is intended to work.** `HideConfSecret` never touches `UILayout` (zero matches on both refs). Instead the reader branch runs:\n\n```go\nif model.IsReadOnlyRoleContext(c) {\n    publishIgnore := model.GetInvisiblePublishAccess(publishAccess)\n    maskedConf = model.FilterConfByPublishIgnore(publishIgnore, maskedConf)\n}\n```\n\n`FilterConfByPublishIgnore` does exactly one thing, which is filter `UILayout`. The intent that readers must not see the administrator's private tabs is therefore already established in the code. The four defects below are failures of that filter, not an argument that it should exist.\n\n`filterLayoutItemByPublishIgnore` is byte-identical at `eef105683` and `v3.7.4-alpha.1` and has not changed since `3facc37df` (#16041).\n\n---\n\n**Defect 1: the password tier is not checked.** `GetPathPasswordByPublishAccess` and `CheckPublishAuthCookie` appear zero times in the walker. Of the five access levels defined in `publishAccess.ts`, only the protected level is `{visible: true, password: ...}`. A password-protected document therefore never matches the invisible list, and there is no password check to catch it afterwards. Its tab survives intact, carrying `title` (the document title), `docIcon`, `notebookId`, `rootId` and `blockId`.\n\nTo be precise about scope: the forbidden level sets `visible: false`, so forbidden documents are correctly filtered. The leak is specific to the password tier.\n\nThis is the same class of defect as the recently fixed tag-label filter, on a different function that the tag fix does not touch.\n\n**Defect 2: fail-open on an unresolvable document.** The walker does:\n\n```go\nbt := treenode.GetBlockTree(rootId)\nif bt == nil {\n    return\n}\n```\n\nand the tab is retained. Compare `CheckBlockIdAccessableByPublishAccess`, which fails closed on the same condition. A `rootId` is unresolvable when its notebook is a locked encrypted notebook or a closed notebook, which are precisely the notebooks a reader must not learn about. Their tab titles pass through.\n\nThis survives the recent change that appends encrypted boxes to the invisible and disable ignore lists, because that change only takes effect once `bt` resolves. The nil branch returns before any ignore list is consulted.\n\n**Defect 3: non-editor tabs are never inspected.** The walker examines one key, `children[\"rootId\"]`. Editor tabs and Backlink/Graph tabs carry it. Other tab types do not, and pass through entirely unexamined:\n\n- `Asset{path, page}` discloses the path of a private PDF or other asset the administrator has open.\n- `Outline{blockId}` discloses a block identifier.\n- `Search{config}` discloses `k` (the search text), `r` (replace text), `name`, `hPath` (a human-readable list of paths) and `idPath` (the notebook and document identifiers the search was scoped to).\n- `Custom{customModelData}` discloses arbitrary plugin state.\n\nThe `Search` case is the sharpest, because it discloses what the administrator was looking for and where, in their own words. Search text frequently contains the exact terms a private document is about.\n\n**Defect 4: the docks are not filtered.** `IUiLayout` is `{layout, left, right, bottom, hideDock}` and the walker enters only `[\"layout\"]`. Dock entries carry type, size and localized titles, so this is low value on its own, noted for completeness rather than as part of the impact claim.\n\n### Proof of Concept\n\nPrecondition: publish mode enabled (default port 6808), anonymous when `Publish.Auth.Enable` is `false`, otherwise any publish reader account. An administrator with the desktop client open, having at some point opened a password-protected document, a document in a locked or closed notebook, an asset, and run a search.\n\n```\nPOST http://127.0.0.1:6808/api/system/getConf\n{}\n\n→ 200. conf.uiLayout.layout contains, for the administrator's session:\n     - Editor tabs for password-protected documents, with title, docIcon,\n       notebookId, rootId and blockId intact\n     - Editor tabs whose rootId does not resolve, retained with their titles,\n       corresponding to locked encrypted or closed notebooks\n     - Asset tabs carrying private asset paths\n     - Search tabs carrying the search text, replace text, hPath and idPath\n```\n\nNo arguments and no authentication are required. Repeating the request after the administrator opens or closes a tab returns updated state, since `setUILayout` persists on every such event.\n\n### Impact\n\nAn anonymous reader in publish mode, or any publish `RoleReader`, receives a live view of the administrator's working session. The disclosed material includes the titles and identifiers of documents the administrator protected with a publish password, the titles of documents in notebooks that are locked or closed and therefore should not be known to exist, the administrator's search terms together with the human-readable paths those searches covered, and the filesystem paths of private assets.\n\nTitles and search terms are author-written free text and routinely describe the subject matter of the documents they refer to. Because the layout is re-persisted on every tab event, repeated polling yields a running record of what the administrator is working on. Confidentiality only, with no integrity or availability impact.\n\n### Suggested fix\n\nFour changes, corresponding to the four defects:\n\n1. Replace the invisible-only check with `checkBlockTreeAccessableByPublishAccess`, so the password tier is honoured.\n2. Make the `bt == nil` branch fail closed, matching `CheckBlockIdAccessableByPublishAccess`.\n3. Drop or scrub `Asset`, `Outline`, `Search` and `Custom` instances rather than passing through anything without a `rootId`.\n4. Walk `left`, `right` and `bottom` in addition to `layout`.\n\nThe simpler and more robust option is to stop serving the administrator's layout to readers at all, and return a minimal default layout instead. Readers have no legitimate use for the administrator's tab arrangement, and a filter that must correctly classify every present and future tab type is a standing source of this class of defect. Defect 3 in particular will recur every time a new tab type is added.","state":0,"publishedAt":"2026-10-01T14:39:32+00:00","modifiedAt":"2026-10-07T17:55:46.4897226+00:00","affected":[{"ecosystem":"Go","name":"github.com/siyuan-note/siyuan/kernel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260812083335-251596fc0de2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw","https://nvd.nist.gov/vuln/detail/CVE-2026-72788","https://github.com/siyuan-note/siyuan","https://github.com/siyuan-note/siyuan/releases/tag/v3.8.0","https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-uilayout-filter"],"sourceUrl":"https://github.com/advisories/GHSA-hgfg-j9pg-43xw","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-hgfg-j9pg-43xw","identifiers":["GHSA-hgfg-j9pg-43xw","CVE-2026-72788","GO-2026-6622"]},"retained":false,"historicalAffected":[]},{"revision":"458e349dd4da4576b966cd274684c5b2","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6622","aliases":["CVE-2026-72788","GHSA-hgfg-j9pg-43xw"],"title":"SiYuan discloses an administrator's open documents and search terms to anonymous readers in github.com/siyuan-note/siyuan/kernel","description":"SiYuan discloses an administrator's open documents and search terms to anonymous readers in github.com/siyuan-note/siyuan/kernel","state":0,"publishedAt":"2026-10-07T14:09:59+00:00","modifiedAt":"2026-10-07T17:45:13.719246+00:00","affected":[{"ecosystem":"Go","name":"github.com/siyuan-note/siyuan/kernel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260812083335-251596fc0de2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hgfg-j9pg-43xw","https://nvd.nist.gov/vuln/detail/CVE-2026-72788","https://github.com/siyuan-note/siyuan/releases/tag/v3.8.0","https://www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-uilayout-filter"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6622","license":"OSV · upstream source license applies","key":"osv:GO-2026-6622","identifiers":["GO-2026-6622","CVE-2026-72788","GHSA-hgfg-j9pg-43xw"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-10-25T22:04:08.5875992+00:00","complete":true,"records":1756,"lastAttemptAt":"2026-10-25T22:04:08.5875992+00:00","lastSuccessAt":"2026-10-25T22:04:08.8596165+00:00","error":null,"lastVerifiedAt":"2026-10-25T22:04:08.8596241+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-1a687ad2a0b90150aa7d97c9f39e63de695ae2db23e31ebc28df1492c461b23c-1c072e7db56f0d3179c99f5b33ed9988c328ad75783993f151d8522bc700aaba","complete":true,"records":414046,"lastAttemptAt":"2026-10-25T22:02:18.7733512+00:00","lastSuccessAt":"2026-10-25T22:02:18.6654575+00:00","error":null,"lastVerifiedAt":"2026-10-25T22:02:18.7733512+00:00","snapshotPublishedAt":"2026-10-25T21:21:07+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-43321610382942b8ad8c85917eab1546","complete":false,"records":4735,"lastAttemptAt":"2026-10-25T22:04:11.413428+00:00","lastSuccessAt":"2026-10-24T23:18:49.862+00:00","error":"InvalidDataException","lastVerifiedAt":"2026-10-24T23:18:49.862+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":4764,"expectedIdentifiers":13474},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-10-25T22:04:08.5875992+00:00","complete":true,"records":1093,"lastAttemptAt":"2026-10-25T22:04:08.5875992+00:00","lastSuccessAt":"2026-10-25T22:04:08.8610999+00:00","error":null,"lastVerifiedAt":"2026-10-25T22:04:08.8611051+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-204a3fb93a00487e8f7f36db01dc851d","complete":true,"records":13413,"lastAttemptAt":"2026-10-25T22:04:09.4303098+00:00","lastSuccessAt":"2026-10-25T16:19:28.681+00:00","error":null,"lastVerifiedAt":"2026-10-25T16:19:28.681+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13474,"expectedIdentifiers":13474},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-2375a4e597279abf92e8747e140fe8da9d421877cd49cae3ac69a2cb78469b2c","complete":true,"records":9779,"lastAttemptAt":"2026-10-25T22:04:08.4463409+00:00","lastSuccessAt":"2026-10-24T13:19:53.1346702+00:00","error":null,"lastVerifiedAt":"2026-10-25T22:04:08.4463409+00:00","snapshotPublishedAt":"2026-10-24T03:03:12+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-16ad89dfea13ab9e9b0108e63a759d63bd4559cc68b58491107d62ee35bbbaf2","complete":true,"records":1965,"lastAttemptAt":"2026-10-25T22:02:18.9302775+00:00","lastSuccessAt":"2026-10-23T16:01:26.4487605+00:00","error":null,"lastVerifiedAt":"2026-10-25T22:02:18.9302775+00:00","snapshotPublishedAt":"2026-10-21T12:18:07+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-7da67a15aa6e56a0e3081a7646dc74d537e6ef974afc593c2b1794ed01970648","complete":true,"records":2969,"lastAttemptAt":"2026-10-25T22:04:08.554556+00:00","lastSuccessAt":"2026-10-24T13:19:59.1145547+00:00","error":null,"lastVerifiedAt":"2026-10-25T22:04:08.554556+00:00","snapshotPublishedAt":"2026-10-24T08:47:51+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-11236ada05a0588e51df37636716526867f73fb127392c49680b6f8561496a99","complete":true,"records":230781,"lastAttemptAt":"2026-10-25T22:04:08.3201814+00:00","lastSuccessAt":"2026-10-25T22:04:07.173333+00:00","error":null,"lastVerifiedAt":"2026-10-25T22:04:08.3201814+00:00","snapshotPublishedAt":"2026-10-25T21:33:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null}]}