CVE-2026-34448: SiYuan Knowledge Management RCE Vulnerability

CVE-2026-34448 Overview

CVE-2026-34448 is a critical stored Cross-Site Scripting (XSS) vulnerability in SiYuan, a personal knowledge management system. The vulnerability exists in the Attribute View mAsset field handling, where malicious URLs can be injected and executed when victims access Gallery or Kanban views with "Cover From -> Asset Field" enabled. Due to Electron's insecure configuration with nodeIntegration enabled and contextIsolation disabled, this XSS vulnerability escalates to arbitrary operating system command execution under the victim's account.

Critical Impact

Attackers can achieve remote code execution on victim systems through a stored XSS vulnerability, enabling complete system compromise, data theft, and persistent access to the victim's machine.

Affected Products

• SiYuan versions prior to 3.6.2
• SiYuan Electron Desktop Client (all platforms)
• SiYuan installations with Attribute View mAsset fields enabled

Discovery Timeline

• 2026-03-31 - CVE-2026-34448 published to NVD
• 2026-04-01 - Last updated in NVD database

Technical Details for CVE-2026-34448

Vulnerability Analysis

This vulnerability stems from improper input validation and output encoding in SiYuan's Attribute View component. The application accepts arbitrary http(s) URLs without proper extension validation when processing Asset fields, allowing attackers to inject malicious content. The attacker-controlled string is stored in the coverURL variable and subsequently injected directly into an <img src="..."> HTML attribute without proper escaping or sanitization.

The critical severity of this issue is amplified by the Electron desktop client's insecure security configuration. With nodeIntegration enabled and contextIsolation disabled, JavaScript code executed via the XSS payload gains direct access to Node.js APIs, including the ability to spawn child processes and execute arbitrary system commands.

Root Cause

The root cause is twofold: First, the application fails to properly validate and sanitize user-supplied URLs in the Asset field, accepting any http(s) URL regardless of file extension or content type. Second, the vulnerable code injects these URLs directly into HTML attributes without proper output encoding or Content Security Policy enforcement. Combined with Electron's permissive security settings, this creates a direct path from user input to arbitrary code execution.

Attack Vector

The attack is network-based and requires low privileges—an attacker needs the ability to create or modify Attribute View entries with mAsset fields. User interaction is required as the victim must open a Gallery or Kanban view with the malicious entry displayed using "Cover From -> Asset Field" enabled.

The attack flow involves:

1. Attacker creates a malicious URL payload in an Attribute View mAsset field
2. The malicious URL contains JavaScript that will execute when rendered
3. When a victim opens the Gallery or Kanban view with cover display enabled, the URL is injected into an <img src="..."> attribute
4. The injected JavaScript executes with full Node.js capabilities due to Electron's insecure configuration
5. The attacker achieves arbitrary OS command execution under the victim's account

The vulnerability manifests when the application renders asset URLs without proper sanitization. The malicious payload is stored in the coverURL variable and directly interpolated into HTML without escaping. For technical details, see the GitHub Security Advisory GHSA-rx4h-526q-4458.

Detection Methods for CVE-2026-34448

Indicators of Compromise

• Unusual or malformed URLs in SiYuan Attribute View mAsset fields containing JavaScript code or event handlers
• Unexpected child process spawning from SiYuan Electron application processes
• Network connections initiated by SiYuan to unknown or suspicious external hosts
• Modified or suspicious entries in SiYuan's data files with embedded script content

Detection Strategies

• Monitor for <script> tags, javascript: URIs, or HTML event handlers (onerror, onload) within SiYuan database entries and configuration files
• Implement endpoint detection rules to alert on child process creation from Electron applications with suspicious command-line arguments
• Review SiYuan data directories for entries containing URL patterns with embedded JavaScript or unusual encodings

Monitoring Recommendations

• Enable application logging for SiYuan and monitor for errors related to asset rendering or URL processing
• Deploy network monitoring to detect anomalous outbound connections from SiYuan processes
• Implement file integrity monitoring on SiYuan workspace directories to detect unauthorized modifications

How to Mitigate CVE-2026-34448

Immediate Actions Required

• Upgrade SiYuan to version 3.6.2 or later immediately
• Audit existing Attribute View entries for suspicious URLs or embedded script content
• Review SiYuan workspaces shared with untrusted users for potential malicious payloads
• Consider temporarily disabling "Cover From -> Asset Field" functionality until patching is complete

Patch Information

The vulnerability has been addressed in SiYuan version 3.6.2. Users should update immediately via the official release. The patch information is available at the GitHub Release v3.6.2. Additional technical details about the vulnerability are documented in GitHub Issue #17246.

Workarounds

• Disable "Cover From -> Asset Field" option in Gallery and Kanban views until patching is possible
• Restrict access to SiYuan workspaces to trusted users only
• Run SiYuan in an isolated environment or virtual machine if immediate patching is not feasible
• Implement network segmentation to limit potential lateral movement if exploitation occurs

# Verify SiYuan version after upgrade
# Check that you are running version 3.6.2 or later
siyuan --version
# Expected output: 3.6.2 or higher