CVE-2026-66012 | siyuan-note SiYuan up to 3.7.1 MCP Kernel model.CheckAuth improper authorization

July 25, 2026 Yanac

A vulnerability marked as critical has been reported in siyuan-note SiYuan up to 3.7.1. This issue affects the function model.CheckAuth of the component MCP Kernel. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-66012. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More