VULNRABLE / Vulnerability / CVE-2026-74904

CVE-2026-74904

HIGH LOW github.com/siyuan-note/siyuan/kernel GHSA

Exploit verdict: No active-exploit signal

CVSS Score

Severity

HIGH

EPSS

Source

GHSA

Summary

SiYuan: 17 block metadata/content endpoints in kernel/api/block.go have zero publish-access filtering, reachable by anonymous publish-mode readers

What this means

CVE-2026-74904 is a high-severity vulnerability affecting github.com/siyuan-note/siyuan/kernel, rated CVSS 8. The EPSS model estimates a 1% probability of exploitation in the next 30 days. Published October 3, 2026.

View full advisory at GHSA →