SiYuan <= v3.6.1 - Bookmark Data Disclosure
CVE-2026-34453
Verified
Description
SiYuan v3.6.2 contains an information disclosure vulnerability caused by improper authorization checks in the publish service's bookmark filtering, letting unauthenticated visitors access bookmarked blocks from password-protected documents, exploit requires access to the publish service.
Severity
High
CVSS Score
7.5
Exploit Probability
1%
Affected Product
siyuan
Published Date
April 2, 2026
Template Author
0x_akoko
CVE-2026-34453.yaml
7.5Score
CVSS Metrics
CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2026-34453
CWE ID:
cwe-863
Remediation Steps
Update to version 3.6.2 or later.