VYPR
patchPublished Oct 25, 2026· Updated Oct 26, 2026· 1 source

Siyuan Note: Six Vulnerabilities Including Path Bypass and SQLi Disclosed Together

Key findings • Six vulnerabilities in Siyuan Note disclosed on October 25, 2026, ranging from Medium to High severity. • High-severity path bypass (CVE-2026-116171) allows copying sensitive w…

Key findings

  • Six vulnerabilities in Siyuan Note disclosed on October 25, 2026, ranging from Medium to High severity.
  • High-severity path bypass (CVE-2026-116171) allows copying sensitive workspace configuration files on Windows.
  • Multiple injection flaws including SQLi (CVE-2026-116170) and XSS (CVE-2026-116169, CVE-2026-116167) affect data integrity and user sessions.
  • Path traversal (CVE-2026-116168) enables access to sensitive files like .env.
  • Unenforced TLS setting (CVE-2026-116166) leads to cleartext transmission of sensitive data.
  • All vulnerabilities are fixed in Siyuan Note version 3.8.7.

On October 25, 2026, a batch of six vulnerabilities was disclosed for Siyuan Note, a popular note-taking application. The vulnerabilities, all disclosed on the same day, range in severity from medium to high, with the most critical allowing for sensitive file access and bypass of security restrictions. These disclosures highlight potential risks for users who have not updated their Siyuan Note installations to the latest patched versions.

Several vulnerabilities revolve around improper path handling and validation. CVE-2026-116171, a high-severity flaw, involves a sensitive path denylist bypass in Windows versions of Siyuan Note. Attackers can exploit this by prepending the extended-length prefix (\\?\) to local paths, allowing them to copy workspace configuration files. Similarly, CVE-2026-116168, a medium-severity path traversal vulnerability, occurs in the MCP asset tool. This flaw arises from an incomplete blacklist of sensitive files, enabling authenticated attackers to copy and read files like .env into the workspace.

Another group of vulnerabilities impacts data integrity and security through injection flaws. CVE-2026-116170, a medium-severity SQL injection vulnerability, allows authenticated administrators to access history data. By injecting unescaped query values into specific endpoints, attackers can exfiltrate deleted document content, titles, and paths from the history.db file. Additionally, CVE-2026-116169, a medium-severity stored cross-site scripting (XSS) vulnerability, permits users with edit permissions to inject scripts. This is possible by embedding javascript: URLs within math block content rendered with KaTeX, potentially leading to script execution upon rendering. CVE-2026-116167, also medium-severity, is an XSS vulnerability in the unauthenticated /check-auth page. It lacks proper scheme validation for the to parameter, enabling attackers to craft links with javascript: URIs that execute after a user logs in, potentially invoking kernel APIs.

Finally, CVE-2026-116166 addresses a security oversight in network communication. Despite Siyuan Note accepting a networkServeTLS setting, it was not enforced, allowing the kernel port to serve API access over plain HTTP alongside HTTPS. This exposes network-adjacent attackers to sniffing login flows and session cookies, as responses omit HSTS headers and the cookie lacks the Secure attribute.

All six vulnerabilities were fixed in Siyuan Note version 3.8.7. Users are strongly advised to update to this version or later to mitigate these security risks. The batch of disclosures underscores the importance of timely patching for Siyuan Note users to protect their data and system integrity.

The vulnerabilities disclosed include:

Users should ensure they are running Siyuan Note version 3.8.7 or newer. The disclosures were made on October 25, 2026.

CVE-2026-116171, CVE-2026-116170, CVE-2026-116169, CVE-2026-116168, CVE-2026-116167, CVE-2026-116166.

Synthesized by Vypr AI