CVE-2026-85578 — SiYuan through 3.8.1 Authorization Bypass via getFile
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured …
Published: 2026-09-04 · CVSS: 7.1 · CVSS 4.0
SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal configuration by knowing the hidden notebook identifier and file path.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7