CVE-2026-54068Disclosure

LOWCVSS 5.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the /api/icon/getDynamicIcon endpoint is explicitly excluded from authentication in SiYuan's kernel router (router.go, "不需要鉴权" -- no auth needed). When called with type=8 and a valid block id parameter, this endpoint invokes RenderDynamicIconContentTemplate, which executes a Go template that includes the querySQL and queryBlocks functions. These functions run arbitrary SELECT statements against the SiYuan SQLite database. An unauthenticated network-adjacent attacker who knows a valid block ID can exfiltrate all user note content, tags, asset references, and block attributes from the database. This vulnerability is fixed in 3.7.0.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://dailycve.com/siyuan-authentication-bypass-via-template-injection-leading-to-sqlite-data-exfiltration-cve-2026-54068-critical-dc-jul2026-864/

Full discourse1 post

DailyCVE@dailycve92d
Disclosure
🔴 SiYuan, Authentication Bypass via Template Injection leading to SQLite Data Exfiltration, #CVE-2026-54068 (Critical) -DC-Jul2026-864 https://dailycve.com/siyuan-authentication-bypass-via-template-injection-leading-to-sqlite-data-exfiltration-cve-2026-54068-critical-dc-jul2026-864/
Post summary
A new CVE-2026-54068 reports an authentication bypass via template injection in SiYuan that can lead to SQLite data exfiltration; it details the vulnerability but does not provide PoC, exploit code, or mitigation guidance.
0000054
218 followersView on X

Explore more

Back to dashboard