SiYuan, an open-source personal knowledge management system, has a vulnerability (CVE-2026-59854) in versions before 3.7.1 where the POST /api/file/globalCopyFiles endpoint accepts attacker-supplied absolute source paths. The underlying protection relies on util.IsSensitivePath denylist in kernel/util/path.go, which omits several common credential files such as .git-credentials, .netrc, .pgpass, .kube/config, .docker/config.json, and .gnupg. This flaw enables an authenticated administrator or API-token user to copy these sensitive files into the workspace and exfiltrate them via the file API. The vulnerability is classified as CWE-693 (Protection Mechanism Failure) and has a CVSS 3.1 base score of 4.9 (medium severity). The issue is resolved in versions 3.7.1-alpha.2 and 3.7.1.

An authenticated administrator or user with an API token can exploit this vulnerability to copy sensitive credential files from the home directory into the workspace. This can lead to exposure and exfiltration of sensitive credentials such as Git, database, Kubernetes, Docker, and GnuPG configuration files. The confidentiality of these credentials is compromised, but there is no direct impact on integrity or availability reported.

Upgrade SiYuan to version 3.7.1-alpha.2 or 3.7.1 or later, where this vulnerability is fixed. Since no official patch link or advisory is provided, verify the upgrade from the vendor's official releases. Until upgraded, restrict access to authenticated administrator and API-token users to trusted personnel only to reduce risk.