CVE-2026-33670
SiYuan is a personal knowledge management system.
Published Mar 26, 2026 · updated Jun 17, 2026 · b3log siyuan
SiYuan is a personal knowledge management system. Prior to version 3.6.2, the /api/file/readDir interface was used to traverse and retrieve the file names of all documents under a notebook. Version 3.6.2 patches the issue.
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Mar 26, 2026 · NIST NVD
Detected
SiYuan is a personal knowledge management system. Prior to version 3.6.2, the /api/file/readDir interface was used to traverse and retrieve the file names of all documents under a notebook. Version 3.6.2 patches the issue.
Jun 17, 2026 · NIST NVD
Updated
SiYuan is a personal knowledge management system. Prior to version 3.6.2, the /api/file/readDir interface was used to traverse and retrieve the file names of all documents under a notebook. Version 3.6.2 patches the issue.
Affected
- cpe b3log/siyuanversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-33670
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-33670
SiYuan is a personal knowledge management system. Prior to version 3.6.2, the /api/file/readDir interface was used to traverse and retrieve the file names of all documents under a notebook. Version 3.6.2 patches the issue.
nvd.nist.gov