Insufficient Authorization in SiYuan Knowledge Management System

CVE-2026-45147

What is CVE-2026-45147?

The SiYuan Knowledge Management System is susceptible to an authorization bypass due to inadequate access control measures in the POST /api/tag/getTag endpoint. This flaw allows any authenticated user, including those with limited roles such as RoleReader and RoleEditor in a read-only workspace, to modify critical configuration settings. Specifically, an attacker can invoke this endpoint with a sorting argument to alter model.Conf.Tag.Sort and initiate model.Conf.Save(), resulting in the entire workspace's conf.json being rewritten. This severe oversight has been rectified in version 3.7.0.

References