SiYuan < v3.7.2 Vulnerabilities: XSS and Auth Bypass
SiYuan versions before 3.7.2 contain multiple critical vulnerabilities, including stored cross-site scripting and missing authorization checks, that can lead to remote code execution and administrator takeover.
What happened
SiYuan before v3.7.2 has a stored cross-site scripting vulnerability (CVE-2026-65605) in Attribute View cell rendering. Template column values are rendered as HTML without proper escaping, allowing injection of malicious scripts. Because the desktop renderer runs with nodeIntegration enabled, these scripts can escalate to arbitrary command execution.
SiYuan before v3.7.2 also has a cross-site scripting vulnerability (CVE-2026-65606) in the siyuan:// protocol handler. When a non-existent plugin name is referenced, the application inserts the link's icon parameter into the tab header without escaping, allowing injection of an <img onerror=...> element. This can also escalate to arbitrary operating-system command execution.
Additionally, SiYuan before v3.7.2 has a missing authorization vulnerability (CVE-2026-66012) in the POST /mcp kernel endpoint. This exposes 31 MCP tools, including a file tool with list/read/write/delete/rename/copy actions across the entire workspace. When the Publish server is enabled in anonymous mode, a remote unauthenticated attacker can reach /mcp and perform arbitrary file operations, leading to administrator takeover.
How 0Day mitigates this
siyuan is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.