Vulnerability in Siyuan-note Siyuan
CVE-2026-54069
SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, SiYuan Note's kernel HTTP server unconditionally trusts all chrome-extension:// origins, granting RoleAdministrator access to every installed browser extension…
Affected products
- Siyuan-note Siyuan — versions < 3.7.0
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)