CVE-2026-54069Disclosure

LOWCVSS 9.2 · CRITICAL

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-extension:// origins, granting RoleAdministrator access to every installed browser extension without any authentication. Combined with the default empty AccessAuthCode on desktop installs, any Chrome/Chromium extension -- including a compromised legitimate extension via supply chain attack -- can make fully authenticated admin API calls to the SiYuan kernel at 127.0.0.1:6806, enabling data exfiltration, stored XSS injection, and configuration tampering. This vulnerability is fixed in 3.7.0.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-346

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Threat summary

Public PoC is present in monitored signal
1 mentions across 1 observed day

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://cloud.projectdiscovery.io/library/CVE-2026-54069

Full discourse1 post

pdnuclei-bot@pdnuclei_bot138d
Disclosure
🚨 CVE-2026-54069 - high 🚨 SiYuan Note <= 3.6.5 - Authentication Bypass > SiYuan Note 3.6.5 and prior is vulnerable to authentication bypass. The CheckAuth mid... 👾 https://cloud.projectdiscovery.io/library/CVE-2026-54069 @pdnuclei #NucleiTemplates #cve
Post summary
The tweet announces CVE-2026-54069, identifies it as an authentication bypass affecting SiYuan Note <=3.6.5, and links to a resource likely containing detection or PoC details, but provides no evidence of exploitation or remediation.
00010108
959 followersView on X

Explore more

Back to dashboard