CVE-2026-23851

HIGH EPSS 34.9%
Published Jan 19, 20265mo ago · Modified Jun 17, 20262w ago
8.3 CVSS 4.0
High
Find Similar
Published Jan 19, 2026 5mo ago
Last Modified Jun 17, 2026 2w ago

Description

SiYuan is a personal knowledge management system. Versions prior to 3.5.4 contain a logic vulnerability in the /api/file/globalCopyFiles endpoint. The function allows authenticated users to copy files from any location on the server's filesystem into the application's workspace without proper path validation. The vulnerability exists in the api/file.go source code. The function globalCopyFiles accepts a list of source paths (srcs) from the JSON request body. While the code checks if the source file exists using filelock.IsExist(src), it fails to validate whether the source path resides within the authorized workspace directory. Version 3.5.4 patches the issue.

CVSS Details

Base Score
8.3
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
34.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 1

VendorProductVersionRange
b3logsiyuan* <3.5.4

References 4

  • github.com https://github.com/siyuan-note/siyuan/commit/b2274baba2e11c8cf8901b0c5c871e5b27f1f6dd
    Patch
  • github.com https://github.com/siyuan-note/siyuan/commit/f8f4b517077b92c90c0d7b51ac11be1b34b273ad
    Patch
  • github.com https://github.com/siyuan-note/siyuan/issues/16860
    Issue TrackingPatch
  • github.com https://github.com/siyuan-note/siyuan/security/advisories/GHSA-94c7-g2fj-7682
    ExploitPatchVendor Advisory

Remediation

  • github.com https://github.com/siyuan-note/siyuan/commit/b2274baba2e11c8cf8901b0c5c871e5b27f1f6dd
    Patch
  • github.com https://github.com/siyuan-note/siyuan/commit/f8f4b517077b92c90c0d7b51ac11be1b34b273ad
    Patch
  • github.com https://github.com/siyuan-note/siyuan/issues/16860
    Issue TrackingPatch
  • github.com https://github.com/siyuan-note/siyuan/security/advisories/GHSA-94c7-g2fj-7682
    ExploitPatchVendor Advisory