CVE-2026-66012
🗓️ 25 Jul 2026 10:45:56Reported by VulnCheckType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 99 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | SiYuan: Auth Bypass | 1 Aug 202612:20 | – | 1dayexploit |
 | Exploit for CVE-2026-66012 | 26 Jul 202610:45 | – | githubexploit |
 | CVE-2026-66012 | 25 Jul 202610:45 | – | attackerkb |
 | CVE-2026-66012 | 25 Jul 202611:26 | – | circl |
 | CVE-2026-66012 SiYuan before v3.7.2 Unauthenticated Administrator Takeover via MCP | 25 Jul 202610:45 | – | cvelist |
 | EUVD-2026-49043 | 25 Jul 202610:45 | – | euvd |
 | SiYuan MCP asset.upload Reads Arbitrary Absolute File Paths (Workspace Boundary Bypass) | 2 Oct 202623:16 | – | github |
 | siyuan-mcp-admin-takeover-cve-2026-66012-missing-authorization | 31 Oct 202601:00 | – | kitploit |
 | SiYuan MCP Auth Bypass (CVE-2026-66012) | 8 Aug 202616:40 | – | kittysploit |
| SiYuan CVE-2026-66012 MCP Auth Bypass Detect | 8 Aug 202616:40 | – | kittysploit |
10
[
{
"vendor": "siyuan-note",
"product": "siyuan",
"defaultStatus": "unaffected",
"packageURL": "pkg:golang/github.com/siyuan-note/siyuan",
"versions": [
{
"version": "0",
"status": "affected",
"versionType": "semver",
"lessThan": "3.7.2"
},
{
"version": "3.7.2",
"status": "unaffected",
"versionType": "semver"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| jsonrpc | request body | /mcp | Missing authorization vulnerability in the MCP endpoint. When the Publish server is in anonymous mode, it allows unauthenticated access to 31 MCP tools, including a file tool that can read/write/delete/rename/copy files across the entire workspace. | CWE-862 |
| id | request body | /mcp | Missing authorization vulnerability in the MCP endpoint. When the Publish server is in anonymous mode, it allows unauthenticated access to 31 MCP tools, including a file tool that can read/write/delete/rename/copy files across the entire workspace. | CWE-862 |
| method | request body | /mcp | Missing authorization vulnerability in the MCP endpoint. When the Publish server is in anonymous mode, it allows unauthenticated access to 31 MCP tools, including a file tool that can read/write/delete/rename/copy files across the entire workspace. | CWE-862 |
| params | request body | /mcp | Missing authorization vulnerability in the MCP endpoint. When the Publish server is in anonymous mode, it allows unauthenticated access to 31 MCP tools, including a file tool that can read/write/delete/rename/copy files across the entire workspace. | CWE-862 |
| Authorization | header | /api/system/getConf | Privilege escalation endpoint on the kernel port. If an attacker extracts the 'api.token' from 'conf/conf.json' via the /mcp endpoint, they can use it here to gain Administrator access. | CWE-862 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
24 Oct 2026 13:10Current
6.2Medium risk
Vulners AI Score6.2
CVSS 410
CVSS 3.110
EPSS0.00764
SSVC