CVE-2026-32750 in SiYuan
Summary
by MITRE • 03/20/2026
SiYuan is a personal knowledge management system. In versions 3.6.0 and below, POST /api/import/importStdMd passes the localPath parameter directly to model.ImportFromLocalPath with zero path validation. The function recursively reads every file under the given path and permanently stores their content as SiYuan note documents in the workspace database, making them searchable and accessible to all workspace users. Data persists in the workspace database across restarts and is accessible to Publish Service Reader accounts. Combined with the renderSprig SQL injection ( separate advisory ), a non-admin user can then read all imported secrets without any additional privileges. This issue has been fixed in version 3.6.1.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 03/25/2026
The vulnerability identified as CVE-2026-32750 affects SiYuan, a personal knowledge management system, specifically versions 3.6.0 and earlier. This security flaw resides in the API endpoint POST /api/import/importStdMd which processes the localPath parameter without implementing any form of path validation. The absence of input sanitization creates a critical pathway for unauthorized data access and potential information disclosure. The function model.ImportFromLocalPath directly accepts this unvalidated parameter and proceeds to recursively traverse the entire directory structure specified by the path. This recursive file reading operation encompasses every file within the designated path, regardless of its type or sensitivity, and permanently stores their content as SiYuan note documents within the workspace database. The database persistence mechanism ensures that imported data remains accessible across system restarts and is available to all workspace users, fundamentally undermining the system's access control model.
The operational impact of this vulnerability extends beyond simple data exposure, as it creates a pathway for privilege escalation and data exfiltration. When combined with a separate vulnerability involving renderSprig SQL injection, a non-administrator user can exploit this weakness to access all imported secrets and sensitive information stored within the workspace database. The recursive nature of the file import process means that even if a user attempts to limit access through directory permissions, the vulnerability allows unrestricted traversal of the file system from the perspective of the application's execution context. This creates a scenario where an attacker can potentially access files that should normally be restricted, including configuration files, credentials, and other sensitive data that may have been inadvertently imported into the system. The vulnerability represents a classic case of insufficient input validation and inadequate access controls, allowing for arbitrary file system traversal and data persistence.
The technical implementation of this vulnerability aligns with CWE-22, which describes improper limitation of a pathname to a restricted directory, commonly known as path traversal attacks. Additionally, the vulnerability demonstrates characteristics of CWE-74, which covers improper neutralization of special elements in output used by a downstream component, and CWE-89, concerning SQL injection vulnerabilities. The attack vector leverages the lack of proper path validation combined with recursive file processing to create a persistent data repository that can be exploited through the SQL injection vulnerability. This combination creates a multi-layered attack scenario where the initial path traversal vulnerability provides the foundation for data collection, while the SQL injection vulnerability enables the extraction of sensitive information from the collected data. The fix implemented in version 3.6.1 addresses these issues through proper path validation and enhanced access controls, ensuring that only authorized users can access imported data and that file system traversal operations are properly constrained.
Security practitioners should implement immediate mitigations including restricting access to the import API endpoint, implementing proper path validation, and ensuring that all imported files are properly sanitized before storage. The vulnerability highlights the importance of principle of least privilege and proper input validation in security-critical applications. Organizations using SiYuan should conduct thorough security assessments of their knowledge management systems, particularly focusing on data import and export mechanisms. The issue also demonstrates the critical importance of regular security updates and the potential for cascading vulnerabilities when multiple weaknesses exist within a single system. Compliance with security standards such as NIST SP 800-53 and ISO 27001 requires implementing proper access controls and input validation measures to prevent similar vulnerabilities from compromising organizational security posture.