CyberRota Analysis
AI-GeneratedSiYuan versions prior to 3.7.4 expose sensitive debug endpoints, such as heap and goroutine dumps, without authentication when not operating in production mode. This vulnerability allows attackers to access in-memory secrets, including AccessAuthCode and AI provider API keys, posing a significant risk to the confidentiality of sensitive information. Organizations using SiYuan should prioritize patching to mitigate the risk of unauthorized data exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SiYuan before 3.7.4 registers Go net/http/pprof debug endpoints including heap and goroutine dumps without authentication when --mode flag is not set to exactly prod. Attackers can access /debug/pprof/heap and related endpoints to extract in-memory secrets including AccessAuthCode and AI provider API keys.