Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive string equality checks to block access to sensitive files. On case-insensitive file systems such as Windows, attackers can bypass restrictions using mixed-case paths and read protected configuration files. This vulnerability is fixed in 3.5.5.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-25992 SiYuan Knowledge Management System Path Traversal Vulnerability in Versions Prior to 3.5.5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25992
Post summary
The text announces a path traversal vulnerability in SiYuan Knowledge Management System prior to version 3.5.5, providing technical details but no PoC, exploit, or mitigation information.
CVE-2026-25992 SiYuan is a personal knowledge management system. Prior to 3.5.5, the /api/file/getFile endpoint uses case-sensitive string equality checks to block access to sensiti… https://www.cve.org/CVERecord?id=CVE-2026-25992
Post summary
The text provides a brief disclosure of a flaw in SiYuan’s /api/file/getFile endpoint before version 3.5.5, highlighting a case-sensitive string equality check issue, without detailing the vulnerability type, exploitation, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | b3log | siyuan | - | - | - |