CVE-2026-72792: SiYuan: Tag labels from password-protected documents are returned to readers who have not entered the password
/api/tag/getTag filters its results for reader roles through FilterTagsByPublishIgnore, which checks only the visible publish tier. Documents that are published but password-protected pass that check, so a reader who has never entered a document’s publish password receives every tag label used inside it, together with occurrence counts.
The project has already treated this exact tier mismatch as a vulnerability on a sibling path: commit 82e9ded42 (“Enforce publish access for graph nodes”) moved the graph endpoint off the visible-only filter and onto a password-aware one. FilterTagsByPublishIgnore was not upgraded alongside it.
References
- github.com/advisories/GHSA-mp7r-57w4-5qm3
- github.com/siyuan-note/siyuan/commit/4515fa257cfae2db0a43844c61de8ef1ac853796
- github.com/siyuan-note/siyuan/security/advisories/GHSA-mp7r-57w4-5qm3
- nvd.nist.gov/vuln/detail/CVE-2026-72792
- www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-tag-api
Code Behaviors & Features
Detect and mitigate CVE-2026-72792 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →