CVE-2026-85578

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2

Description An authorization bypass exists in the '/api/file/getFile' endpoint. Users with a reader role can retrieve files from notebooks configured as Visible:false if they know the hidden notebook identifier and the file path. This allows unauthorized access to private workspace files, including internal configuration and notebook metadata.

Recommendations Update to version 3.8.2 or later. Restrict access to the '/api/file/getFile' endpoint to minimize the risk of unauthorized file retrieval.