CVE-2026-72806: SiYuan Auth Bypass Vulnerability

CVE-2026-72806 Overview

CVE-2026-72806 is an authentication bypass vulnerability in SiYuan, an open-source personal knowledge management application. Versions before v3.7.4 fail to enforce publish password protection in the FilterViewByPublishAccess filter when rendering attribute views and database rows. Unauthenticated remote users can invoke renderAttributeView without supplying the required password. The response leaks protected document data including titles, block identifiers, and column values. The flaw is categorized as Missing Authorization [CWE-862].

Critical Impact
Unauthenticated attackers reachable over the network can read password-protected document content by calling the renderAttributeView endpoint directly, bypassing the publish password control.

Affected Products

SiYuan versions prior to v3.7.4
SiYuan self-hosted deployments exposing the publish interface
SiYuan instances configured with publish password protection on documents containing attribute views or databases

Discovery Timeline

2026-08-12 - CVE-2026-72806 published to the National Vulnerability Database
2026-08-12 - Last updated in NVD database

Technical Details for CVE-2026-72806

Vulnerability Analysis

SiYuan supports publishing documents behind a password so that only authorized readers can view sensitive content. The FilterViewByPublishAccess function is responsible for evaluating whether the requester holds the credentials needed to view protected views. In vulnerable versions, this filter is not applied to the code path that renders attribute views and their underlying database rows.

An unauthenticated client can call the renderAttributeView endpoint directly and receive the rendered structure without a password check. Returned fields include document titles, internal block IDs, and column values stored in the database rows tied to protected documents. Because the filter never fires, the publish password provides no protection for content surfaced through attribute view rendering.

Root Cause

The root cause is a missing authorization check on a server-side rendering endpoint. Rather than centralizing publish password enforcement, SiYuan relies on per-handler invocation of FilterViewByPublishAccess. The attribute view rendering handler omits this call, leaving the endpoint reachable by any anonymous requester who can send HTTP traffic to the publish interface.

Attack Vector

Exploitation requires only network access to a SiYuan instance that has published documents with password protection enabled. An attacker issues a crafted HTTP request to the renderAttributeView API without providing the publish password. The server processes the request, resolves the referenced attribute view, and returns row data belonging to protected documents. No user interaction, privilege, or prior authentication is required.

Technical details are available in the GitHub Security Advisory GHSA-6mcf-g667-w3qv and the VulnCheck Security Advisory.

Detection Methods for CVE-2026-72806

Indicators of Compromise

Unauthenticated HTTP requests to the renderAttributeView endpoint originating from external IP addresses.
Access log entries invoking attribute view APIs without a preceding publish password authentication event.
Anomalous read volume against the SiYuan publish interface, especially requests referencing block IDs tied to password-protected documents.

Detection Strategies

Inspect SiYuan application logs for calls to renderAttributeView that lack an associated authenticated session cookie or password parameter.
Correlate publish interface traffic with document configuration data to flag responses that expose protected block IDs and column values.
Deploy web application firewall rules that require the publish password parameter on attribute view endpoints for documents marked as protected.

Monitoring Recommendations

Enable verbose access logging on the SiYuan publish endpoint and forward logs to a centralized analytics platform for retention and search.
Alert on spikes in renderAttributeView request volume, particularly from single source addresses enumerating multiple block IDs.
Baseline expected publish traffic patterns and generate alerts when unauthenticated requests target attribute view or database row APIs.

How to Mitigate CVE-2026-72806

Immediate Actions Required

Upgrade SiYuan to version v3.7.4 or later, which restores the FilterViewByPublishAccess check on attribute view rendering.
Audit published documents for sensitive content and rotate any information that may have been disclosed prior to patching.
Restrict network exposure of the SiYuan publish interface to trusted networks or place it behind a reverse proxy that enforces authentication.

Patch Information

The SiYuan maintainers addressed the vulnerability in v3.7.4 by enforcing the publish password check on the attribute view rendering path. Refer to the GitHub Security Advisory GHSA-6mcf-g667-w3qv for commit references and release notes.

Workarounds

Disable the publish feature on instances that cannot be upgraded immediately.
Remove attribute views and database blocks from password-protected documents until the patch is applied.
Front the SiYuan publish interface with a reverse proxy that requires HTTP authentication or client certificates for all requests.

bash

# Configuration example: restrict SiYuan publish endpoint via nginx auth
location /api/av/renderAttributeView {
    auth_basic "SiYuan Publish";
    auth_basic_user_file /etc/nginx/.htpasswd;
    proxy_pass http://127.0.0.1:6806;
}