Description

SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that returns absolute filesystem paths unmodified to CheckAuth-only requests. Attackers can harvest relative asset paths from published documents and submit them to resolveAssetPath to obtain the server's absolute workspace path, disclosing the operating-system username and installation layout.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-12T20:17:52.110Z",
  "pubdate": "2026-08-12T20:17:52.110Z",
  "executiveSummary": "An information disclosure vulnerability exists in SiYuan versions before v3.7.4 within the resolveAssetPath endpoint.\nThe vulnerability allows remote attackers to obtain the server's absolute workspace path, disclosing the operating-system username and underlying installation layout.\nThe flaw affects SiYuan products prior to version v3.7.4.\nThe risk implication involves the exposure of sensitive internal server configurations and file system structures, which can assist threat actors in planning subsequent targeted attacks.\nAttacker capabilities are limited to harvesting information, requiring the ability to gather relative asset paths from published documents and subsequently submit them to the vulnerable endpoint.\nExploitation requires access to CheckAuth-only requests and knowledge of valid relative asset paths originating from published documents.",
  "technicalDetails": "The root cause of the vulnerability resides in the resolveAssetPath endpoint, which improperly processes and returns absolute filesystem paths unmodified in response to CheckAuth-only requests.\nThe vulnerable component is the resolveAssetPath endpoint within SiYuan prior to version v3.7.4.\nAuthentication requirements involve CheckAuth-only access levels, meaning standard authentication checks applied to this specific endpoint are insufficient to restrict sensitive path disclosures.\nPrivilege requirements are minimal, as the endpoint processes requests under these limited authentication checks.\nNetwork exposure affects deployments of SiYuan running vulnerable versions where the resolveAssetPath endpoint is reachable.\nThe attack flow proceeds in a sequential manner: first, an attacker harvests relative asset paths from publicly accessible or published documents within the SiYuan application.\nSecond, the attacker crafts malicious requests containing these harvested relative asset paths and submits them to the resolveAssetPath endpoint.\nThird, the server processes the input and returns the absolute filesystem paths unmodified due to the lack of proper sanitization or abstraction in the endpoint logic.\nPayload behavior consists of querying the asset resolution mechanism with specific relative identifiers to elicit responses containing absolute directory structures.\nThe post-exploitation impact includes the disclosure of the server's absolute workspace path, exposing the underlying operating-system username and the specific directory layout of the installation."
}