CVE-2026-32110— SiYuan has a Full-Read SSRF via /api/network/forwardProxy
Quick assessment
Affected
siyuan-note siyuan
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SiYuan是SiYuan开源的一个隐私至上的个人知识管理系统。 SiYuan 3.6.0之前版本存在代码问题漏洞，该漏洞源于/api/network/forwardProxy端点缺少URL验证，可能导致经过身份验证的用户从服务器发起任意HTTP请求，访问内部网络或云元数据服务。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-32110
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SiYuan has a Full-Read SSRF via /api/network/forwardProxy
Source: CVE Program / CVE List V5
Vulnerability Description
SiYuan is a personal knowledge management system. Prior to 3.6.0, the /api/network/forwardProxy endpoint allows authenticated users to make arbitrary HTTP requests from the server. The endpoint accepts a user-controlled URL and makes HTTP requests to it, returning the full response body and headers. There is no URL validation to prevent requests to internal networks, localhost, or cloud metadata services. This vulnerability is fixed in 3.6.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Vulnerability Title
SiYuan 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SiYuan是SiYuan开源的一个隐私至上的个人知识管理系统。 SiYuan 3.6.0之前版本存在代码问题漏洞，该漏洞源于/api/network/forwardProxy端点缺少URL验证，可能导致经过身份验证的用户从服务器发起任意HTTP请求，访问内部网络或云元数据服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| siyuan-note | siyuan | < 3.6.0 | - |
|
II. Public POCs for CVE-2026-32110
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-32110
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-32110 (1)
IV. Related Vulnerabilities
Same product: siyuan
-
CVE-2026-101092
SiYuan before v3.8.4 Information Disclosure via getCurrentAt -
CVE-2026-101091
SiYuan before v3.8.4 SQL Injection via Block Query Embed -
CVE-2026-100646
SiYuan before v3.8.4 Authentication Bypass via Missing Origi -
CVE-2026-100645
SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban -
CVE-2026-100644
SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath
Same vendor: siyuan-note
-
CVE-2026-101092
SiYuan before v3.8.4 Information Disclosure via getCurrentAt -
CVE-2026-101091
SiYuan before v3.8.4 SQL Injection via Block Query Embed -
CVE-2026-100646
SiYuan before v3.8.4 Authentication Bypass via Missing Origi -
CVE-2026-100645
SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban -
CVE-2026-100644
SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath
Same weakness: CWE-918
-
CVE-2026-55160
Authenticated Server-Side Request Forgery (SSRF) via feed UR -
CVE-2026-101910
ip-address: no classifier recognizes the NAT64 local-use ran -
CVE-2026-101898
Axios: HTTP/2 adapter bypasses configured DNS lookup and pro -
CVE-2026-82375
Apache Roller: Server-side request forgery via entry trackba -
CVE-2026-100750
Joomla Extension - regularlabs.com - Arbitrary file read / S
V. Comments for CVE-2026-32110
No comments yet