SiYuan anfällig für Willkürliches Lesen von Dateien über die Dateikopier-Funktionalität in github.com/siyuan-note/siyuan/kernel

The Arbitrary File Access vulnerability in SiYuan allows an attacker to read any file accessible to the application process. This could include configuration files containing sensitive credentials, database files with user data, or even source code. Successful exploitation could lead to data breaches, compromise of system integrity, and potential privilege escalation depending on the files accessed. The impact is particularly severe if the application is running with elevated privileges or has access to sensitive data stores. While the specific attack vector isn't detailed, the file copy functionality is the likely point of exploitation.

Organizations and individuals using SiYuan for note-taking, particularly those storing sensitive information within the application, are at risk. Users running older, unpatched versions of SiYuan are especially vulnerable. Shared hosting environments where multiple users share the same SiYuan instance are also at increased risk.

• linux / server: Monitor SiYuan process logs for unusual file access attempts. Use auditd to track file access events and create rules to alert on unauthorized reads.

auditctl -w /path/to/siyuan/data -p wa -k siyuan_file_access

• go: Examine the SiYuan source code for the file copy function and related areas for potential vulnerabilities. Use static analysis tools to identify potential security flaws. • generic web: Monitor web server access logs for requests containing unusual file paths or attempts to access sensitive files via the SiYuan application.

1. 2026-02-03Disclosure

   disclosure

1. Reserviert2026-01-16
2. Veröffentlicht2026-02-03
3. Geändert2026-03-03
4. EPSS aktualisiert2026-03-23

The primary mitigation for CVE-2026-23851 is to immediately upgrade SiYuan kernel to version 0.0.0-20260118092521-f8f4b517077b or later. If upgrading is not immediately feasible, consider restricting file access permissions for the SiYuan process to the minimum necessary. Implement input validation and sanitization on any file paths used within the file copy functionality. Monitoring file system activity for unusual access patterns can also help detect potential exploitation attempts. After upgrade, confirm by attempting to trigger the vulnerable file copy functionality and verifying that access is denied.