CVE-2026-72808: SiYuan: Missing publish-access filter on getFileAnnotation discloses private PDF annotations of forbidden/protected documents (publish mode)
The /api/asset/getFileAnnotation endpoint returns the content of .sya PDF-annotation files with no publish-access check. It is gated by CheckAuth only, so it is reachable by the publish RoleReader token and by the anonymous account when Publish.Auth.Enable is false. Its sibling, the /assets/* asset route does enforce publish access, including the publish password. An anonymous reader who knows an asset path can therefore read the private PDF annotations (highlights, notes) attached to assets in publish-forbidden, password-protected, or unpublished documents.
References
- github.com/advisories/GHSA-v7ph-r5r6-4jcj
- github.com/siyuan-note/siyuan/commit/509b35055940856ec1c89cb4888723c4660b776a
- github.com/siyuan-note/siyuan/security/advisories/GHSA-v7ph-r5r6-4jcj
- nvd.nist.gov/vuln/detail/CVE-2026-72808
- www.vulncheck.com/advisories/siyuan-before-information-disclosure-via-getfileannotation
Code Behaviors & Features
Detect and mitigate CVE-2026-72808 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →