CVE-2026-74802

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4

Description A cross-site WebSocket hijacking issue exists in the admin-only '/ws/network/proxy' endpoint. The flaw occurs because the CheckOrigin function is configured to unconditionally return true, effectively disabling origin validation. This allows attackers to use malicious webpages to establish WebSocket connections to the endpoint and instruct the SiYuan kernel process to proxy arbitrary network traffic to targets of the attacker's choice, facilitating authenticated network pivoting through the victim's machine.

Recommendations Update SiYuan to version 3.7.4 or later.