Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SiYuan is a personal knowledge management system. Prior to 3.5.10, a privilege escalation vulnerability exists in the publish service of SiYuan Note that allows low-privilege publish accounts (RoleReader) to modify notebook content via the /api/block/appendHeadingChildren API endpoint. The endpoint requires only the model.CheckAuth role, which accepts RoleReader sessions, but it does not enforce stricter checks, such as CheckAdminRole or CheckReadonly. This allows remote authenticated publish users with read-only privileges to append new blocks to existing documents, compromising the integrity of stored notes.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CVE-2026-30926 (CVSS 9.1): SiYuan 3.5.9 RoleReader publish esc → modify notebooks via appendHeadingChildren. PKM data integrity risk! https://nvd.nist.gov/vuln/detail/CVE-2026-30926
Post summary
CVE-2026-30926 is disclosed with a CVSS score of 9.1, affecting SiYuan 3.5.9 by allowing RoleReader to modify notebooks via appendHeadingChildren, posing a PKM data integrity risk.
CVE-2026-30926 SiYuan is a personal knowledge management system. Prior to 3.5.10, a privilege escalation vulnerability exists in the publish service of SiYuan Note that allows low-p… https://www.cve.org/CVERecord?id=CVE-2026-30926
Post summary
Announcement of CVE-2026-30926, a privilege escalation flaw in SiYuan's publish service before version 3.5.10.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | b3log | siyuan | - | - | - |