LiveActive security incident?Get immediate response
CVE Record

CVE-2026-65605: SiYuan before v3.7.2 Stored XSS to RCE via Attribute View

SiYuan before v3.7.2 contains a stored cross-site scripting vulnerability in Attribute View (database) cell rendering. A Template column value is rendered as HTML via text/template without auto-escaping, and EscapeHTML is only applied when HasUnclosedHtmlTag returns true; because balanced self-closing tags such as <img> are skipped by that check, a payload like <img src=x onerror=...> is stored unescaped and later inserted into the page via innerHTML, executing when the database is viewed. Because the desktop renderer runs with nodeIntegration enabled, the injected script can reach require and escalate to arbitrary command execution.

CriticalCVSS 9.6Not KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysiscritical

Security readout for executives and security teams

Plain-English summary

SiYuan versions before 3.7.2 can execute malicious content stored in an Attribute View database. When a user views the affected database in the desktop application, the flaw can progress from script execution to arbitrary command execution, potentially compromising data and the user’s device.

Executive priority

Treat as an immediate remediation item for organizations using SiYuan desktop. The combination of unauthenticated content delivery, limited user interaction, and possible device-level command execution creates material confidentiality, integrity, and availability risk. Prioritize inventory and upgrade, while avoiding claims of an active campaign.

Technical view

Template column values are rendered through an unescaped HTML path. Balanced self-closing HTML can bypass the conditional escaping check and is later inserted using innerHTML. In SiYuan’s desktop renderer, enabled Node.js integration lets injected script access privileged functionality, turning stored cross-site scripting into potential remote code execution.

Likely exposure

Organizations using SiYuan desktop releases earlier than 3.7.2 are potentially exposed, particularly where users open shared, imported, synchronized, or otherwise untrusted Attribute View databases. User interaction is required: the malicious database content must be viewed. The supplied evidence does not establish exposure in version 3.7.2 or later.

Exploitation context

The vulnerability has a 9.6 CVSS v3.1 score and requires a user to view stored malicious content. The source bundle identifies no CISA KEV listing and provides no evidence of active exploitation. Public technical descriptions may increase future exploitation risk, but observed exploitation remains unconfirmed.

Researcher notes

The critical transition is from stored XSS to desktop command execution through Node.js integration. The escaping logic reportedly activates only for unclosed HTML, leaving balanced self-closing elements unescaped before innerHTML insertion. The supplied patch commit supports a code-level fix, but this analysis does not independently verify exploitability across every deployment mode.

Mitigation direction

  • Upgrade all SiYuan installations to version 3.7.2 or later.
  • Prioritize desktop installations because Node.js integration enables command execution impact.
  • Restrict opening or synchronizing untrusted Attribute View databases until upgrades are complete.
  • Review the vendor advisory for any additional deployment-specific guidance.

Validation and detection

  • Inventory SiYuan installations and identify versions earlier than 3.7.2.
  • Confirm endpoints were upgraded successfully and older application copies are not still launchable.
  • Review Attribute View Template cells for unexpected HTML or event-handler content.
  • Verify upgraded builds do not execute stored HTML when affected database views are opened.
Prepared
Confidence
high
Sources
5

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cwe · medium confidence lookup

CWE-79: User-session and phishing behavior lookup

Client-side and session-facing weaknesses should be reviewed alongside initial-access and user-execution behaviors. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.

Open ATT&CK lookup
description · low confidence lookup

Execution behavior lookup

The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup
description · low confidence lookup

Database behavior lookup

The CVE wording references database injection or access, so collection and exfiltration review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.

Open ATT&CK lookup
cve · low confidence lookup

CVE-2026-65605 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Critical
CVSS
9.6 (3.1)
Known Exploited
No
Published

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

2CVSS vectors
3Timeline events
1ADP providers
4Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: pocAutomatable: noTechnical Impact: total

CVSS vector scores

2 official scores

We collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.

ScoreVersionSeverityVectorExploitImpactSource
9.6CVSS 3.1CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H2.86VulnCheck
9.4CVSS 4.0CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H——VulnCheck

Vulnerability scoring details

Base CVSS 4.0 score

9.4Critical
CVSS 4.0 vector shape for CVE-2026-65605Attack VectorAttack ComplexityAttack RequirementsPrivileges RequiredUser InteractionVS ConfidentialityVS IntegrityVS AvailabilitySS ConfidentialitySS IntegritySS Availability

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Attack Vector
NetworkAdjacentLocalPhysical
Attack Complexity
LowHigh
Attack Requirements
NonePresent
Privileges Required
NoneLowHigh
User Interaction
NonePassiveActive
VS Confidentiality
HighLowNone
VS Integrity
HighLowNone
VS Availability
HighLowNone
SS Confidentiality
HighLowNone
SS Integrity
HighLowNone
SS Availability
HighLowNone

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CISA-ADPCISA ADP Vulnrichment
other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
siyuan-notesiyuan0, 3.7.2unaffected
Weakness

CWE details

CWE-79

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.