POST /api/file/globalCopyFiles in SiYuan allows an authenticated administrator or API‑token user to supply absolute source paths and copy files into a workspace. The path‑sanitization routine util.IsSensitivePath lacks several common credential files on UNIX‑style home directories, such as .git‑credentials, .docker/config.json, and .gnupg. Consequently, an attacker who can obtain administrator privileges can copy these files into the workspace and subsequently exfiltrate them via the file API, exposing credentials that could compromise external services. The weakness is an example of incorrect authorization, identified by CWE‑693.

The vulnerability affects the open‑source SiYuan personal knowledge management system provided by Siyuan Note. Versions prior to 3.7.1 are vulnerable; the issue was resolved in releases 3.7.1‑alpha.2 and 3.7.1 and later.

The CVSS score of 4.9 user with administrator or API‑token privileges, the attack vector is limited to trusted insiders or compromised accounts. The EPSS score of <1% indicates a very low probability of exploitation, and the vulnerability is not listed’s KEV catalog, suggesting a lower chance of widespread exploitation at this time. Nevertheless, possession of credential files poses a significant confidentiality risk and can lead to lateral movement and further compromise of linked services.