The vulnerability allows an attacker to read the full decrypted contents of unlocked encrypted notebooks through SiYuan’s publish API without any authentication. By bypassing the required authorization checks, this flaw constitutes a missing authorization (CWE‑862) that exposes sensitive user data and can lead to confidentiality compromise.

SiYuan note is affected in all releases prior to version 3.7.4. Any installation using these earlier versions lacks proper validation of publish access for encrypted notebooks and therefore treats them as publicly accessible by default.

The CVSS score of 9.2 reflects a high‑severity authentication bypass that can be exploited remotely via the publish API. While the EPSS score is not available and the vulnerability is not in CISA’s KEV catalog, the existence of a publicly documented exploit path means that the risk of exploitation is significant. Anyone with network access to the publish API can enumerate encrypted notebook URLs and retrieve their decrypted content without providing credentials or the encryption key.