CVE-2026-23850: SiYuan Path Traversal Vulnerability

CVE-2026-23850 Overview

CVE-2026-23850 is a Local File Disclosure (LFD) vulnerability in SiYuan, a personal knowledge management system. The vulnerability exists in versions prior to 3.5.4 where the markdown feature allows unrestricted server-side HTML rendering, enabling attackers to read arbitrary files from the server.

Critical Impact

Attackers can exploit unrestricted server-side HTML rendering in the markdown feature to read sensitive files from the server, potentially exposing configuration files, credentials, and other confidential data.

Affected Products

• SiYuan versions prior to 3.5.4
• SiYuan 3.4.2 and earlier releases
• SiYuan instances with markdown rendering enabled

Discovery Timeline

• 2026-01-19 - CVE-2026-23850 published to NVD
• 2026-01-19 - Last updated in NVD database

Technical Details for CVE-2026-23850

Vulnerability Analysis

This vulnerability is classified under CWE-22 (Path Traversal), which involves improper limitation of a pathname to a restricted directory. The SiYuan application's markdown rendering functionality processes user-supplied content and renders HTML on the server side without adequate restrictions or sanitization.

When markdown content is processed, the application fails to properly validate and restrict the scope of file access operations. This allows an attacker to craft malicious markdown content that, when rendered, instructs the server to read and include contents of arbitrary files from the local file system. The vulnerability affects the file handling logic in the filetree.go and file.go components of the SiYuan kernel.

The vulnerability is exploitable over the network without requiring user interaction or prior authentication, making it particularly dangerous for SiYuan instances exposed to untrusted networks.

Root Cause

The root cause lies in the unrestricted server-side HTML rendering within the markdown processing pipeline. The affected code in kernel/api/filetree.go (lines 799-886) and kernel/model/file.go (line 1035) does not implement proper path validation or access controls when processing markdown content that references file paths. This allows attackers to use path traversal sequences or direct file references to access files outside the intended directory scope.

Attack Vector

The attack vector is network-based, requiring the attacker to submit specially crafted markdown content to a vulnerable SiYuan instance. The malicious payload exploits the server-side rendering process to read local files. The attack flow typically involves:

1. Attacker identifies a SiYuan instance running a vulnerable version (prior to 3.5.4)
2. Attacker crafts malicious markdown content containing path traversal sequences or file inclusion directives
3. The server-side HTML renderer processes the markdown without proper sanitization
4. The server reads the targeted file and includes its contents in the rendered output
5. Attacker retrieves the response containing the disclosed file contents

For technical implementation details, refer to the GitHub Security Advisory GHSA-cv54-7wv7-qxcw and the related source code references.

Detection Methods for CVE-2026-23850

Indicators of Compromise

• Unusual file access patterns in application logs, particularly requests targeting system files like /etc/passwd or configuration files
• Markdown content containing suspicious path traversal sequences such as ../ or absolute file paths
• Unexpected server responses containing file contents that should not be accessible through normal application usage
• HTTP requests to markdown rendering endpoints with encoded path traversal characters

Detection Strategies

• Implement web application firewall (WAF) rules to detect and block path traversal patterns in request payloads
• Monitor application logs for attempts to access files outside the expected workspace directories
• Deploy file integrity monitoring on sensitive configuration and credential files
• Use SentinelOne Singularity to detect anomalous file read operations from the SiYuan process

Monitoring Recommendations

• Enable verbose logging for the SiYuan application to capture detailed request information
• Set up alerts for unusual file access patterns originating from the web application process
• Monitor for reconnaissance activity targeting SiYuan instances, including version enumeration attempts
• Implement network traffic analysis to identify suspicious markdown payloads

How to Mitigate CVE-2026-23850

Immediate Actions Required

• Upgrade SiYuan to version 3.5.4 or later immediately
• Restrict network access to SiYuan instances to trusted users and networks only
• Review server logs for any indication of prior exploitation attempts
• Audit sensitive files that may have been exposed and rotate any potentially compromised credentials

Patch Information

The vulnerability has been fixed in SiYuan version 3.5.4. The fix involves implementing proper input validation and access controls in the markdown rendering pipeline to prevent arbitrary file reads. Two commits address this vulnerability:

• Commit b2274baba2e11c8cf8901b0c5c871e5b27f1f6dd
• Commit f8f4b517077b92c90c0d7b51ac11be1b34b273ad

For additional details, see GitHub Issue #16860 and the GitHub Security Advisory.

Workarounds

• If immediate patching is not possible, restrict network access to the SiYuan instance using firewall rules
• Disable or limit the markdown rendering functionality if it is not essential for operations
• Deploy a reverse proxy with request filtering to block known path traversal patterns
• Run SiYuan in a containerized environment with limited file system access to reduce the impact of potential exploitation

# Example: Restrict network access using iptables
iptables -A INPUT -p tcp --dport 6806 -s 192.168.1.0/24 -j ACCEPT
iptables -A INPUT -p tcp --dport 6806 -j DROP