CVE-2026-82651: Exposure of Sensitive Information to an Unauthorized Actor in siyuan-note siyuan
Description
CVE-2026-82651 is a medium severity vulnerability in siyuan-note before version 3.8.1 where certain endpoints do not apply a security guard to restrict access to sensitive file paths. Authenticated administrators can access historical snapshots of sensitive files, including plaintext publish-mode passwords and template files, due to missing path validation on /history/*path and /repo/diff/*path endpoints.
CVSS v4.0
Score 6.9medium
Affected software
siyuan-note
siyuan
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
SiYuan versions prior to 3.8.1 fail to apply the IsForbiddenAbsPath guard to the /history/*path and /repo/diff/*path endpoints in kernel/server/serve.go. These endpoints require admin authentication but construct file paths independently without the guard, allowing an authenticated administrator to retrieve historical snapshots of sensitive files that should be blocked. This includes files such as data/.siyuan/publishAccess.json containing plaintext publish-mode passwords and files under data/templates/.
Potential Impact
An authenticated administrator can access sensitive historical file snapshots that should be restricted, potentially exposing plaintext passwords and sensitive template files. This exposure could lead to unauthorized disclosure of sensitive information within the system. No indication of privilege escalation or remote unauthenticated access is described.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability is fixed starting from version 3.8.1, upgrading to version 3.8.1 or later is recommended once the vendor releases the fix. Until then, restrict administrator access to trusted personnel only.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-30T13:38:00.102Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a944043acd9273b49a612b4
Added to database: 08/30/2026, 14:37:55 UTC
Last enriched: 09/07/2026, 15:24:41 UTC
Last updated: 10/13/2026, 18:48:24 UTC
Views: 95
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.