PT-2026-76598 · Siyuan · Siyuan
CVSS v3.1
9.3
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
SiYuan versions prior to 3.7.4
Description
When the
--mode flag is not set specifically to prod, the software registers Go net/http/pprof debug endpoints without authentication. This allows attackers to access endpoints such as '/debug/pprof/heap' and other related debug paths to extract sensitive in-memory data, including AccessAuthCode and AI provider API keys.Recommendations
Update to version 3.7.4 or later.
Set the
--mode flag to prod to ensure debug endpoints are not registered.Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Siyuan