CVE-2026-73054: Improper Authentication in siyuan-note siyuan
SiYuan note-taking software versions prior to 3.7.4 have an authentication bypass vulnerability in the WebSocket endpoint. This flaw arises from inconsistent parsing of duplicated query parameters between authentication exemption and session quarantine checks. An unauthenticated attacker can exploit this by crafting a malicious WebSocket URI to bypass access authentication code validation and access live kernel event streams containing sensitive document metadata and operation logs.
AI Analysis
Technical Summary
CVE-2026-73054 describes an authentication bypass vulnerability in SiYuan note-taking software before version 3.7.4. The vulnerability is due to differential parsing of duplicated query parameters in the WebSocket endpoint, which causes the authentication exemption check and session quarantine check to behave inconsistently. This allows unauthenticated attackers to bypass access authentication code validation by sending a specially crafted WebSocket URI with duplicated query parameters. Successful exploitation grants access to live kernel event streams that include document identifiers, titles, and operation logs.
Potential Impact
Unauthenticated attackers can bypass authentication controls on the WebSocket endpoint and gain access to sensitive live event data, including document identifiers, titles, and operation logs. This exposure could lead to information disclosure of potentially sensitive user data and internal operations within the SiYuan application.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the WebSocket endpoint or implementing additional network-level controls may reduce exposure.
CVE-2026-73054: Improper Authentication in siyuan-note siyuan
Description
SiYuan note-taking software versions prior to 3.7.4 have an authentication bypass vulnerability in the WebSocket endpoint. This flaw arises from inconsistent parsing of duplicated query parameters between authentication exemption and session quarantine checks. An unauthenticated attacker can exploit this by crafting a malicious WebSocket URI to bypass access authentication code validation and access live kernel event streams containing sensitive document metadata and operation logs.
CVSS v4.0
Score 8.7high
Affected software
pkg:github/siyuan-note/siyuanRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-73054 describes an authentication bypass vulnerability in SiYuan note-taking software before version 3.7.4. The vulnerability is due to differential parsing of duplicated query parameters in the WebSocket endpoint, which causes the authentication exemption check and session quarantine check to behave inconsistently. This allows unauthenticated attackers to bypass access authentication code validation by sending a specially crafted WebSocket URI with duplicated query parameters. Successful exploitation grants access to live kernel event streams that include document identifiers, titles, and operation logs.
Potential Impact
Unauthenticated attackers can bypass authentication controls on the WebSocket endpoint and gain access to sensitive live event data, including document identifiers, titles, and operation logs. This exposure could lead to information disclosure of potentially sensitive user data and internal operations within the SiYuan application.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch link is provided, users should monitor the vendor's communications for updates. Until a fix is available, restricting access to the WebSocket endpoint or implementing additional network-level controls may reduce exposure.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-10T19:10:18.101Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a80e09dbf8831d539c1fe60
Added to database: 08/15/2026, 21:56:45 UTC
Last enriched: 08/15/2026, 22:11:13 UTC
Last updated: 08/16/2026, 01:45:53 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.