External risk intelligence

SiYuan Stored and Reflected XSS via SVG Sanitizer Bypass

CVE advisorySeverity: CRITICAL (CVSS 9.3)

CVE-2026-66394

SiYuan is a personal knowledge management note-taking application. While it can be self-hosted or run on a local machine, deployments accessible over the internet are plausible but not the default or standard design compared to traditional internet-facing services or gateways.

Cross-site Scripting

Halo Surface Signal: 3 out of 5 — possibly public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

The SiYuan application has vulnerabilities that could allow attackers to execute scripts by bypassing its security checks for SVG files. This could potentially lead to unauthorized script execution within the application's environment. The main concern is confirming if our environment uses this specific technology and is exposed.

Attackers can bypass security to run unwanted scripts.
Understand if SiYuan is used within our systems.
Confirm relevance and assess potential exposure.

Attack Path

How an attacker could exploit the issue

An authenticated attacker can inject malicious scripts into an SVG file by exploiting vulnerabilities in SiYuan's SVG sanitization process. By embedding script tags within specific SVG elements like `<desc>`, `<style>`, or `<noscript>`, the attacker can bypass the cleaner. When these crafted SVGs are later rendered, the browser interprets the embedded scripts as executable content within the application's origin, potentially leading to unauthorized actions or data compromise.

Requires authenticated access.
Bypasses SVG sanitization.
Enables script execution.

Live Threat

Current exploitation, exposure, and threat context

Authenticated attackers could execute arbitrary scripts within the application's origin by crafting SVG content that bypasses SiYuan's sanitization. This could occur when an attacker tricks a user into viewing a maliciously crafted SVG file, leading to script execution in the context of the user's session.

User-provided SVG content.
Scripts execute in the user's browser.
Compromise of application data.

Operational Fix

Recommended remediation, mitigation, and detection steps

To address this cross-site scripting vulnerability, application owners and platform teams are likely responsible for managing the SiYuan instances. The first practical step is to identify all deployed SiYuan instances, determine their exposure, and confirm business criticality to prioritize remediation efforts.

Confirm application and platform ownership.
Verify instance reachability and criticality.
Plan and coordinate remediation activities.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is SiYuan?

SiYuan is a local-first, personal knowledge management and note-taking application. It is typically used for organizing personal data and documentation, often running on individual machines or self-hosted servers, rather than functioning as a standard public-facing web service.

What does CWE-79 mean in the context of CVE-2026-66394?

CWE-79 refers to Improper Neutralization of Input During Web Page Generation, commonly known as Cross-Site Scripting (XSS). In this CVE, the application's sanitization process fails to properly clean SVG files. This allows an attacker to hide malicious scripts inside specific SVG tags, which the browser then mistakenly executes as code instead of treating as harmless image data.

How does an attacker trigger CVE-2026-66394?

An attacker needs authenticated access to the application to inject the malicious SVG. The trigger occurs when a user views or renders the manipulated SVG file. Simply having the file in the system is not enough; the vulnerability is only activated when the browser parses the SVG content, allowing the embedded script to run within the application's origin.

Is my instance affected by this vulnerability?

According to Halo Surface Signal, SiYuan is generally a personal tool, so internet-facing deployments are not the default design. However, if your instance is accessible over the network, it is at higher risk. You should assess whether your specific deployment is reachable by unauthorized parties, as authentication is a prerequisite for the attack.

How do I respond to this threat?

Start by identifying all SiYuan instances within your environment and verifying their current version. If you are running a version earlier than 3.7.3, you are affected. Coordinate with the platform owners to plan an update to a patched version and evaluate the necessity of exposing these instances to the network.

References

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.