Kernel: Duplicate Advisory: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)

SiYuan kernel versions up to and including v3.7.2 contain an information disclosure vulnerability (CWE-862) in the /api/asset/getFileAnnotation endpoint. This endpoint returns .sya PDF annotation file content without verifying publish-access permissions, relying only on CheckAuth. Unlike the /assets/* route, which enforces publish access and password protections, this endpoint allows an anonymous user (if publish authentication is disabled) or any publish RoleReader who knows an asset path to read private PDF annotations such as highlights and notes of documents that are publish-forbidden, password-protected, or unpublished. The issue is limited to non-encrypted notebooks, as encrypted-box annotations are not exposed. The vulnerability was fixed in version v3.7.4.

An attacker with knowledge of an asset path can access private PDF annotations of protected documents without proper authorization, potentially exposing sensitive information contained in highlights and notes. This does not affect encrypted notebooks, limiting the scope of exposure. The vulnerability does not allow modification or deletion of data, only information disclosure.

Upgrade SiYuan to version v3.7.4 or later, where the vulnerability is fixed by enforcing proper publish-access checks on the /api/asset/getFileAnnotation endpoint. Until then, ensure publish authentication is enabled to reduce exposure risk. Patch status is confirmed fixed in v3.7.4.