CVE-2026-32704

SiYuan is a personal knowledge management system. Prior to 3.6.1, POST /api/template/renderSprig lacks model.CheckAdminRole, allowing any authenticated user to execute arbitrary SQL queries against the SiYuan workspace database and exfiltrate all note content, metadata, and custom attributes. This vulnerability is fixed in 3.6.1.

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVSS v3.1

6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.25% chance of exploitation in the next 30 days, 16th percentile

Published

2026-03-13

Updated

2026-03-16

Proof-of-concept exploits (1)

• advisories/GHSA-4j3x-hhg2-fm2x

References

• CVE Record
• NVD entry

Related

• CVE-2026-3270
• CVE-2026-32707
• CVE-2026-32699
• CVE-2026-3271
• CVE-2026-32695
• CVE-2026-32711