CVE-2026-32704CWE-285CWE-732

SiYuan renderSprig: missing admin check allows any user to read full workspace DB

Medium · published March 13, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

SiYuan is a personal knowledge management system. Prior to 3.6.1, POST /api/template/renderSprig lacks model.CheckAdminRole, allowing any authenticated user to execute arbitrary SQL queries against the SiYuan workspace database and exfiltrate all note content, metadata, and custom attributes. This vulnerability is fixed in 3.6.1.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.2th percentile
Weaknesses
CWE-285 · Improper Authorization; CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2026-03-13T21:10Z
EPSS history
Timeline
  • 13 MAR 21:10Z
    SiYuan renderSprig: missing admin check allows any user to read full workspace DB
    cvelistv5