CVE-2026-126776 | siyuan-note SiYuan 3.7.0/3.8.9 Web Fetch kernel/util/webfetch.go path traversal

November 11, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in siyuan-note SiYuan 3.7.0/3.8.9. This impacts an unknown function of the file kernel/util/webfetch.go of the component Web Fetch. This manipulation causes path traversal.

This vulnerability is handled as CVE-2026-126776. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More