CVE-2026-85578 - SiYuan through 3.8.1 Authorization Bypass via getFile

Back Back to CVE browser

HIGH

SiYuan through 3.8.1 Authorization Bypass via getFile

Published Sep 4, 2026

7.1

HIGH

CVSS 4.0

EPSS 0.38%

Description

SiYuan through 3.8.1 contains an authorization bypass vulnerability in the /api/file/getFile endpoint that allows readers to retrieve files from notebooks explicitly configured as Visible:false. Attackers with reader role can access private workspace files including notebook metadata and internal configuration by knowing the hidden notebook identifier and file path.

Affected products

Vendor Siyuan-Note Product Siyuan Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=3.8.1

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Siyuan-Note

Siyuan

unaffected

Version	Status	Constraints
0	affected	<=3.8.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8ggq-wq3f-vxrw
vendor-advisory
https://www.vulncheck.com/advisories/siyuan-through-3.8.1-authorization-bypass-via-getfile
third-party-advisory

Link	Providers	Tags
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8ggq-wq3f-vxrw		vendor-advisory
https://www.vulncheck.com/advisories/siyuan-through-3.8.1-authorization-bypass-via-getfile		third-party-advisory