CVE-2026-72799

creationtimestamp| type| source ---|---|--- 2026-09-04 22:35:23+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5w7r-f4cg-rqq7 2026-09-05 10:31:56+00:00| seen| https://gist.github.com/alon710/abc6a26fdebf669c87f091f304527249...

CVE-2026-72799 SiYuan before v3.7.4 Information Disclosure via Path Resolution

SiYuan before v3.7.4 affected =v3.7.2 fails to enforce publish-access filters on five filetree path-resolution endpoints getFullHPathByID, getHPathByID, getPathByID, getIDsByHPath, and getHPathByPath. In publish mode, when Publish.Auth.Enable is false, an unauthenticated anonymous reader — or any...

CVE-2026-72799 SiYuan before v3.7.4 Information Disclosure via Path Resolution

SiYuan before v3.7.4 affected =v3.7.2 fails to enforce publish-access filters on five filetree path-resolution endpoints getFullHPathByID, getHPathByID, getPathByID, getIDsByHPath, and getHPathByPath. In publish mode, when Publish.Auth.Enable is false, an unauthenticated anonymous reader — or any...