CVE-2026-33669

SiYuan (personal knowledge management system) had a vulnerability prior to version 3.6.2 where document IDs could be retrieved via /api/file/readDir and then /api/block/getChildBlocks could be used to view content of all documents, effectively enabling arbitrary document reading within the Publis...