{"id":"CVE-2026-73605","revision":null,"records":[{"revision":"b34a868427a6486c85cb23db3eae5a90","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-73605","aliases":[],"title":"SiYuan before v3.7.4 Path Traversal via getUniqueFilename","description":"SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existence without validation or confinement. Attackers can supply arbitrary absolute paths to determine whether files and directories exist on the host, enabling reconnaissance of the filesystem layout and installed software.","state":0,"publishedAt":"2026-08-13T11:28:10.825+00:00","modifiedAt":"2026-08-14T20:18:37.885+00:00","affected":[{"ecosystem":"Vendor product","name":"siyuan","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"siyuan-note\",\n                    \"product\": \"siyuan\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"packageURL\": \"pkg:golang/github.com/siyuan-note/siyuan/kernel\",\n                    \"versions\": [\n                        {\n                            \"version\": \"0\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\",\n                            \"lessThan\": \"3.7.4\"\n                        },\n                        {\n                            \"version\": \"3.7.4\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","score":6.9,"severity":"MEDIUM"},{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","score":5.8,"severity":"MEDIUM"}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hf8h-97gm-4x2p","https://www.vulncheck.com/advisories/siyuan-before-path-traversal-via-getuniquefilename"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-73605","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-73605","identifiers":["CVE-2026-73605"]},"retained":false,"historicalAffected":[]},{"revision":"852e3a93e8a247ca9bc817dda4c71b00","observedAt":"2026-10-25T15:19:09.409+00:00","statement":{"source":"nvd","id":"CVE-2026-73605","aliases":[],"title":"SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existence without validation or confinement. Attackers can supply arbitrary absolute pa…","description":"SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existence without validation or confinement. Attackers can supply arbitrary absolute paths to determine whether files and directories exist on the host, enabling reconnaissance of the filesystem layout and installed software.","state":0,"publishedAt":"2026-08-13T12:17:24.897+00:00","modifiedAt":"2026-10-24T15:10:00.19+00:00","affected":[],"metrics":[{"system":"CVSS 4.0 · disclosure@vulncheck.com · Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","score":6.9,"severity":"MEDIUM"},{"system":"CVSS 3.1 · disclosure@vulncheck.com · Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","score":5.8,"severity":"MEDIUM"}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hf8h-97gm-4x2p","https://www.vulncheck.com/advisories/siyuan-before-path-traversal-via-getuniquefilename"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-73605","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Deferred","weaknesses":["CWE-862"],"productCriteria":[],"sourceDates":{"published":"2026-08-13T12:17:24.897","lastModified":"2026-10-24T15:10:00.190"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2026-73605","identifiers":["CVE-2026-73605"]},"retained":false,"historicalAffected":[]},{"revision":"18f313c533c94e1584af561b91dbed9f","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-hf8h-97gm-4x2p","aliases":["CVE-2026-73605","GO-2026-6626"],"title":"SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem","description":"### Summary\n\n`/api/file/getUniqueFilename` takes a path from the request body and passes it to a filesystem existence check with no validation, confinement or authorization. The response distinguishes paths that exist from paths that do not, so an anonymous reader in publish mode can probe arbitrary locations on the host, one request per probe. Files and directories both work.\n\nEvery neighbouring file route either requires an administrator or confines the path first.\n\n### Details\n\n**Route.** `kernel/api/router.go:289` on master, `:292` on the development branch, `CheckAuth` only.\n\n**Handler,** `kernel/api/file.go:84`, in full:\n\n```go\nutil.ParseJsonArgs(arg, ret, util.BindJsonArg(\"path\", &filePath, true, true))\nret.Data = map[string]any{\"path\": util.GetUniqueFilename(filePath)}\n```\n\n**The argument binder does no path handling.** `util.BindJsonArg` (`kernel/util/net.go:365`) takes two booleans, `required` (the key must be present) and `rejectEmpty` (the value must be non-empty). That is its entire contract. There is no `filepath.Clean`, no workspace join, no traversal check. An absolute path outside the workspace reaches `gulu.File.IsExist` unmodified.\n\n**The oracle.** `util/file.go:67`:\n\n```go\nif !gulu.File.IsExist(filePath) {\n    return filePath\n}\n// otherwise loop, returning the first non-existent dir/base (i).ext\n```\n\nInput echoed back means the path does not exist. A `(1)` suffix means it does.\n\n**The asymmetry.**\n\n| Route | Middleware |\n|---|---|\n| `putFile`, `copyFile`, `globalCopyFiles`, `workspaceCopyFiles`, `removeFile`, `renameFile` | `CheckAuth`, `CheckAdminRole`, `CheckReadonly` |\n| `readDir` (directory enumeration) | `CheckAuth`, `CheckAdminRole` |\n| `getFile` | `CheckAuth`, but `GetAbsPathInWorkspace` returns 403 on escape, plus `rejectEncryptedBoxPath` and a publish-access check |\n| `getUniqueFilename` | `CheckAuth`, nothing else |\n\n`getFile` binds the identical `BindJsonArg(\"path\", &filePath, true, true)` and confines it as its first action.\n\n### Proof of Concept\n\nKernel 3.7.2, publish mode on port 6808, `Publish.Auth.Enable` false, anonymous client. Reader context confirmed by `getChildBlocks` returning HTTP 403 on the same session.\n\n```\n{\"path\":\"/etc/passwd\"}\n→ {\"code\":0,\"msg\":\"\",\"data\":{\"path\":\"/etc/passwd (1)\"}}\n\n{\"path\":\"/etc/shadow\"}\n→ {\"code\":0,\"msg\":\"\",\"data\":{\"path\":\"/etc/shadow (1)\"}}\n\n{\"path\":\"/etc/definitely-not-here\"}\n→ {\"code\":0,\"msg\":\"\",\"data\":{\"path\":\"/etc/definitely-not-here\"}}\n```\n\nDirectories behave the same way:\n\n```\n{\"path\":\"/root\"}      → {\"path\":\"/root (1)\"}\n{\"path\":\"/rootnope\"}  → {\"path\":\"/rootnope\"}\n```\n\nAnd within the workspace, confirming whether a specific document file exists:\n\n```\n{\"path\":\"<workspace>/data/<boxID>/<docID>.sy\"}  → \"<...> (1).sy\"\n{\"path\":\"<workspace>/data/nope-no-such.sy\"}     → echoed unchanged\n```\n\n### Impact\n\nAn anonymous reader in publish mode, or any publish `RoleReader`, determines whether arbitrary paths exist on the host. Because directories respond the same way as files, the filesystem can be walked rather than only guessed at. This supports identifying the operating-system user's home directory, detecting installed software, backup and synchronisation directories, mapping the workspace layout, and confirming the existence of specific documents by probing their storage paths.\n\nIt also composes with the absolute workspace path returned elsewhere, which supplies a concrete prefix rather than requiring guesswork, and it recovers the operating-system username that the browser-request path strip added under issue #17410 was introduced to conceal.\n\nScoped precisely: nothing is read and nothing is written. This is an existence and layout disclosure, valuable primarily as a reconnaissance step.\n\n### Suggested fix\n\nConfine the path as the adjacent `getFile` route does, by routing `filePath` through `util.GetAbsPathInWorkspace` and returning 403 on escape, or add `CheckAdminRole` and `CheckReadonly` to match `readDir`. The frontend uses this endpoint only for naming uploads and assets inside the workspace, so neither change affects legitimate use.","state":0,"publishedAt":"2026-10-01T15:46:01+00:00","modifiedAt":"2026-10-07T17:55:29.5093044+00:00","affected":[{"ecosystem":"Go","name":"github.com/siyuan-note/siyuan/kernel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260812083335-251596fc0de2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hf8h-97gm-4x2p","https://nvd.nist.gov/vuln/detail/CVE-2026-73605","https://github.com/siyuan-note/siyuan","https://www.vulncheck.com/advisories/siyuan-before-path-traversal-via-getuniquefilename"],"sourceUrl":"https://github.com/advisories/GHSA-hf8h-97gm-4x2p","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-hf8h-97gm-4x2p","identifiers":["GHSA-hf8h-97gm-4x2p","CVE-2026-73605","GO-2026-6626"]},"retained":false,"historicalAffected":[]},{"revision":"20cb6a477bc242c490fab1cbb6bf4354","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-6626","aliases":["CVE-2026-73605","GHSA-hf8h-97gm-4x2p"],"title":"SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem in github.com/siyuan-note/siyuan/kernel","description":"SiYuan: getUniqueFilename passes an unvalidated client-supplied path to the filesystem, giving anonymous readers an existence oracle over the entire host filesystem in github.com/siyuan-note/siyuan/kernel","state":0,"publishedAt":"2026-10-07T14:09:59+00:00","modifiedAt":"2026-10-07T17:45:13.4803323+00:00","affected":[{"ecosystem":"Go","name":"github.com/siyuan-note/siyuan/kernel","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20260812083335-251596fc0de2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/siyuan-note/siyuan/security/advisories/GHSA-hf8h-97gm-4x2p","https://nvd.nist.gov/vuln/detail/CVE-2026-73605","https://www.vulncheck.com/advisories/siyuan-before-path-traversal-via-getuniquefilename"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-6626","license":"OSV · upstream source license applies","key":"osv:GO-2026-6626","identifiers":["GO-2026-6626","CVE-2026-73605","GHSA-hf8h-97gm-4x2p"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-10-25T23:02:08.9235896+00:00","complete":true,"records":1756,"lastAttemptAt":"2026-10-25T23:02:08.9235896+00:00","lastSuccessAt":"2026-10-25T23:02:09.0869487+00:00","error":null,"lastVerifiedAt":"2026-10-25T23:02:09.0869513+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-1a687ad2a0b90150aa7d97c9f39e63de695ae2db23e31ebc28df1492c461b23c-5e0a45ae0cf63c80268dd44eaeb20879d480eba4da3306bde3dcd925fa4c114f","complete":true,"records":414047,"lastAttemptAt":"2026-10-25T23:02:08.5196863+00:00","lastSuccessAt":"2026-10-25T23:02:08.4495153+00:00","error":null,"lastVerifiedAt":"2026-10-25T23:02:08.5196863+00:00","snapshotPublishedAt":"2026-10-25T22:26:55+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-43321610382942b8ad8c85917eab1546","complete":false,"records":4735,"lastAttemptAt":"2026-10-25T23:02:11.7890287+00:00","lastSuccessAt":"2026-10-24T23:18:49.862+00:00","error":"InvalidDataException","lastVerifiedAt":"2026-10-24T23:18:49.862+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":4764,"expectedIdentifiers":13474},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-10-25T23:02:08.9235896+00:00","complete":true,"records":1093,"lastAttemptAt":"2026-10-25T23:02:08.9235896+00:00","lastSuccessAt":"2026-10-25T23:02:09.087647+00:00","error":null,"lastVerifiedAt":"2026-10-25T23:02:09.08765+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-204a3fb93a00487e8f7f36db01dc851d","complete":true,"records":13413,"lastAttemptAt":"2026-10-25T23:02:09.6218557+00:00","lastSuccessAt":"2026-10-25T16:19:28.681+00:00","error":null,"lastVerifiedAt":"2026-10-25T16:19:28.681+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13474,"expectedIdentifiers":13474},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-2375a4e597279abf92e8747e140fe8da9d421877cd49cae3ac69a2cb78469b2c","complete":true,"records":9779,"lastAttemptAt":"2026-10-25T23:02:08.8808579+00:00","lastSuccessAt":"2026-10-24T13:19:53.1346702+00:00","error":null,"lastVerifiedAt":"2026-10-25T23:02:08.8808579+00:00","snapshotPublishedAt":"2026-10-24T03:03:12+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-16ad89dfea13ab9e9b0108e63a759d63bd4559cc68b58491107d62ee35bbbaf2","complete":true,"records":1965,"lastAttemptAt":"2026-10-25T23:02:08.6737644+00:00","lastSuccessAt":"2026-10-23T16:01:26.4487605+00:00","error":null,"lastVerifiedAt":"2026-10-25T23:02:08.6737644+00:00","snapshotPublishedAt":"2026-10-21T12:18:07+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-7da67a15aa6e56a0e3081a7646dc74d537e6ef974afc593c2b1794ed01970648","complete":true,"records":2969,"lastAttemptAt":"2026-10-25T23:02:08.8933341+00:00","lastSuccessAt":"2026-10-24T13:19:59.1145547+00:00","error":null,"lastVerifiedAt":"2026-10-25T23:02:08.8933341+00:00","snapshotPublishedAt":"2026-10-24T08:47:51+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-11236ada05a0588e51df37636716526867f73fb127392c49680b6f8561496a99","complete":true,"records":230781,"lastAttemptAt":"2026-10-25T23:02:08.7805888+00:00","lastSuccessAt":"2026-10-25T22:04:07.173333+00:00","error":null,"lastVerifiedAt":"2026-10-25T23:02:08.7805888+00:00","snapshotPublishedAt":"2026-10-25T21:33:06+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null}]}