SiYuan: Unauthenticated SQLite Data Exfiltration via Template Injection in /api/icon/getDynamicIcon

published 2026-06-24 4 mo ago modified 2026-10-25 14 d ago also GHSA-gcm7-57gf-953c , GO-2026-5958 , EUVD-2026-39124

cvss: 5.9; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 4.3%; EPSS 4.3% chance of exploitation in 30 days, percentile 91%
public exploits: 0; none known

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDynamicIcon endpoint is explicitly excluded from authentication in SiYuan's kernel router (router.go, "不需要鉴权" -- no auth needed). When called with type=8 and a valid block id parameter, this endpoint invokes RenderDynamicIconContentTemplate, which executes a Go template that includes the querySQL and queryBlocks functions. These functions run arbitrary SELECT statements against the SiYuan SQLite database. An unauthenticated network-adjacent attacker who knows a valid block ID can exfiltrate all user note content, tags, asset references, and block attributes from the database. This vulnerability is fixed in 3.7.0.

Patch / fix

fixed in 1 distros 1

go github.com/siyuan-note/siyuan/kernel 0.0.0-20260628153353-2d5d72223df4

govulncheck-vulndb openSUSE Leap 16.0 0.0.20260723T184607-160000.1.1

opensuse advisories openSUSE-SU-2026:21483-1

CISA SSVC

Exploitation: Proof of concept is public
Automatable: no
Technical impact: partial
Assessed: 4 mo ago (2026-06-25)

Exploit prediction

4.32% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

github.com https://github.com/siyuan-note/siyuan/security/advisories/GHSA-gcm7-57gf-953c referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.1	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
GitHub	3.1	5.9	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected packages

ecosystem	package	affected	fixed in
go	github.com/siyuan-note/siyuan/kernel	<0.0.0-20260628153353-2d5d72223df4	0.0.0-20260628153353-2d5d72223df4

Affected products

siyuan-note siyuan

Classification

Weakness

CWE-306 Missing Authentication for Critical Functionality

References

github.com /siyuan-note/siyuan/security/advisories/GHSA-gcm7-57gf-953c
exploit, web, advisory
nvd.nist.gov /vuln/detail/CVE-2026-54068
advisory
github.com /siyuan-note/siyuan
package

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary