The vulnerability allows an attacker to retrieve PDF‑annotation files from the /api/asset/getFileAnnotation endpoint without performing a publish‑access check. This endpoint is protected only by a generic authentication check, so an unauthenticated visitor when publish authentication is off or a user with Reader privileges who knows an asset path can read the private “highlights and notes” stored in .sya files. The exposed data come from non‑encrypted notebooks; annotations inside encrypted boxes are not reachable. The flaw is an access control failure (CWE‑862).

Siyuan Note (siyuan‑note:siyuan) versions up to and including v3.7.2 are vulnerable. The issue was resolved starting with version 3.7.4.

The CVSS score of 6.9 indicates a moderate severity, and the EPSS score is not available. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector involves accessing the API over the network, and the attacker must know the exact asset path to request the annotation file. The exploit does not require elevated privileges beyond Reader access or anonymous access when publish authentication is disabled.