External risk intelligence

SiYuan Protocol Handler Vulnerability Leads to Remote Code Execution.

CVE advisorySeverity: CRITICAL (CVSS 9.4)

CVE-2026-65606

This vulnerability exists in a local desktop application and requires the user to interact with a specifically crafted siyuan:// protocol handler link. It is client-side software not designed for public internet exposure or network-based service access.

Cross-site Scripting

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This advisory concerns a critical vulnerability in the SiYuan desktop application that could allow an attacker to execute arbitrary operating system commands by tricking a user into clicking a malicious link. The issue stems from how the application handles custom protocol links, which, when improperly formatted, can lead to the execution of injected code. The primary concern is confirming if this specific application is in use and if users could be exposed to such links.

Malicious links can run unauthorized commands.
Leadership should note potential command execution risks.
Confirm usage and user exposure to malicious links.

Attack Path

How an attacker could exploit the issue

An attacker could trick a user into clicking a malicious `siyuan://plugins/` link. If the link points to a non-existent plugin, the application will open a custom tab and insert the icon parameter from the link into the tab's header without proper sanitization. Because the SiYuan Desktop application has elevated privileges, this flaw can be leveraged to execute arbitrary commands on the user's operating system.

Entry condition: User clicks a crafted link.
Trigger point: Malicious link in custom tab.
Resulting risk: Arbitrary operating system command execution.

Live Threat

Current exploitation, exposure, and threat context

When a user clicks a specially crafted `siyuan://` link, the application could execute arbitrary operating-system commands with the privileges of the application. This occurs when a link references a non-existent plugin, causing the application to insert unescaped content into its user interface, which is then processed by a renderer that has Node.js integration enabled.

Operating system commands could be executed.
Malicious links could be triggered by users.
Arbitrary code execution on user machines.

Operational Fix

Recommended remediation, mitigation, and detection steps

This vulnerability affects the SiYuan Desktop application and requires user interaction with a malicious link to trigger. The initial step for relevant teams, likely including application owners and security teams, is to identify all instances of the SiYuan Desktop application within the organization. Confirming reachability, business criticality, and accountable owners will inform risk-based remediation planning.

Identify all SiYuan Desktop installations.
Verify exposure and business criticality.
Coordinate with application owners for remediation.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the SiYuan application?

SiYuan is a privacy-first, local-first personal knowledge management system. It functions as a desktop application where users organize notes and information. Unlike cloud-based tools, it is typically installed directly on a user's machine, allowing the software to integrate with local operating system functions to manage data and files effectively.

What does CWE-79 mean in the context of CVE-2026-65606?

CWE-79 is the identifier for Cross-Site Scripting (XSS). In this vulnerability, the application fails to sanitize untrusted input provided through a custom protocol link. When the app processes this input, it treats malicious text as active code. Because of the way SiYuan is architected, this script can break out of the app's internal environment to execute commands directly on the host computer.

How is this vulnerability triggered?

An attacker must trick a user into clicking a specifically crafted link starting with 'siyuan://'. The link must reference a plugin name that is not currently installed on the target's machine. If a link points to an existing, valid plugin, the bug is not triggered. The vulnerability only activates when the application attempts to process the missing plugin and incorrectly handles the provided icon parameter.

Do I need to worry about this if I use SiYuan?

Halo Surface Signal notes that this is a local desktop application, making it very unlikely to be exposed via public internet scanning. You should primarily care if users in your environment frequently interact with links from untrusted sources. Since the exploit requires human interaction, the risk is highest where users might click links from emails, chats, or external websites while the SiYuan application is open.

How should I respond to this threat?

The immediate priority is to identify where SiYuan is installed across your organization. Once you have a list of installations, communicate with the users or departments responsible for these machines. Ensure they are aware of the risk posed by clicking unknown links. Finally, coordinate with these owners to plan and apply the necessary software updates to patch the vulnerability.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.