CVE-2026-33670 | Vulnetix

CVE-2026-33670 PUBLISHED CVSS 9.800000190734863 CRITICAL

SiYuan has directory traversal within its publishing service

EPSS 0.66% · 48.2th percentile

Risk Scores

CVSS 3.1

9.800000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

0.66%

48.2th percentile

Affected Products

Vendor	Product	Versions
siyuan-note	siyuan	< 3.6.2, *, < 3.6.2
github.com	siyuan-note/siyuan/kernel	0, 0, 0
b3log	siyuan	0

Timeline

Mar 25, 2026 CVE Published
Mar 26, 2026 Security Advisory
Mar 26, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 26, 2026 PoC Published
Mar 27, 2026 CVE Updated
Mar 30, 2026 PoC Published
Apr 17, 2026 PoC Published

References

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-xmw9-6r43-x9ww technical
https://nvd.nist.gov/vuln/detail/CVE-2026-33670 advisory
https://github.com/siyuan-note/siyuan package

Open in Interactive Console →

$ Console Community · 100/wk Open console ›