Siyuan Vulnerabilities

Security vulnerability tracking for B3log Siyuan

Last updated: Mar 10, 2026
Total CVEs

1

Critical

0

With Exploits

1

Last 30 Days

1

Vulnerability Timeline

1 vulnerabilities discovered over time for Siyuan

Severity Distribution

Critical0
0%
High1
100%
Medium2
200%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2026-309267.1

This vulnerability allows low-privilege users to modify existing notebook content in the SiYuan knowledge management system, even though they should only have read-only access. It occurs because the system doesn't properly check user permissions, enabling these users to add new content to documents through a specific API.

b3logsiyuan
Exploit Available
29 days agoMar 10, 2026

About B3log Siyuan Security

This page provides comprehensive security vulnerability tracking for B3log Siyuan. Our database includes all CVEs affecting this product, updated in real-time from official sources.

Each vulnerability listing includes detailed CVSS severity analysis, exploit availability status, AI-generated explanations, and direct links to official security patches and vendor advisories.

Security Recommendations

  • • Always keep Siyuan updated to the latest version
  • • Subscribe to security advisories from B3log
  • • Monitor this page for new vulnerabilities affecting your version
  • • Prioritize patching critical and high severity issues immediately