CVE-2026-34605— SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated )
Quick assessment
Affected
siyuan-note siyuan
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SiYuan是SiYuan开源的一个隐私至上的个人知识管理系统。 SiYuan 3.6.0版本至3.6.2之前版本存在跨站脚本漏洞，该漏洞源于SanitizeSVG函数可能被绕过，导致跨站脚本攻击。
Public Exploits 1
Nuclei · 1
CVE-2026-34605.yaml [template]
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-34605
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SiYuan: Reflected XSS via SVG namespace prefix bypass in SanitizeSVG ( getDynamicIcon, unauthenticated )
Source: CVE Program / CVE List V5
Vulnerability Description
SiYuan is a personal knowledge management system. From version 3.6.0 to before version 3.6.2, the SanitizeSVG function introduced in version 3.6.0 to fix XSS in the unauthenticated /api/icon/getDynamicIcon endpoint can be bypassed by using namespace-prefixed element names such as <x:script xmlns:x="http://www.w3.org/2000/svg">. The Go HTML5 parser records the element's tag as "x:script" rather than "script", so the tag check passes it through. The SVG is served with Content-Type: image/svg+xml and no Content Security Policy; when a browser opens the response directly, its XML parser resolves the prefix to the SVG namespace and executes the embedded script. This issue has been patched in version 3.6.2.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Vulnerability Title
SiYuan 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SiYuan是SiYuan开源的一个隐私至上的个人知识管理系统。 SiYuan 3.6.0版本至3.6.2之前版本存在跨站脚本漏洞，该漏洞源于SanitizeSVG函数可能被绕过，导致跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| siyuan-note | siyuan | >= 3.6.0, < 3.6.2 | - |
|
II. Public POCs for CVE-2026-34605
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | SiYuan Note through version 3.6.1 is vulnerable to unauthenticated reflected Cross-Site Scripting (XSS) in the `/api/icon/getDynamicIcon` endpoint due to improper filtering of SVG elements with a namespace prefix (such as `<x:script>`). By using a namespaced script element, attackers can bypass the `SanitizeSVG` function and execute arbitrary JavaScript in the victim’s browser upon visiting a crafted link. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34605.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-34605
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-34605 (1)
Same Patch Batch · siyuan-note · 2026-03-31 · 5 CVEs total
| CVE-2026-34449 | 9.7 CRITICAL | SiYuan: Cross-Origin RCE via Permissive CORS Policy and JavaScript Snippet Injection |
| CVE-2026-34448 | 9.1 CRITICAL | SiYuan: Stored XSS in Attribute View gallery/kanban cover rendering allows arbitrary comma |
| CVE-2026-34585 | 8.6 HIGH | SiYuan: Stored XSS in imported .sy.zip content leads to arbitrary command execution |
| CVE-2026-34453 | 7.5 HIGH | SiYuan: Broken access control in /api/bookmark/getBookmark allows unauthenticated publish |
IV. Related Vulnerabilities
Same product: siyuan
-
CVE-2026-105205
SiYuan before 3.8.5 Information Disclosure via /api/block/ge -
CVE-2026-104410
SiYuan before 3.8.5 Information Disclosure via /api/export/p -
CVE-2026-103762
SiYuan before v3.8.5 Missing Authorization in Save-Path Reso -
CVE-2026-103763
SiYuan before v3.8.5 Information Disclosure via /api/noteboo -
CVE-2026-101092
SiYuan before v3.8.4 Information Disclosure via getCurrentAt
Same vendor: siyuan-note
-
CVE-2026-105205
SiYuan before 3.8.5 Information Disclosure via /api/block/ge -
CVE-2026-104410
SiYuan before 3.8.5 Information Disclosure via /api/export/p -
CVE-2026-103763
SiYuan before v3.8.5 Information Disclosure via /api/noteboo -
CVE-2026-103762
SiYuan before v3.8.5 Missing Authorization in Save-Path Reso -
CVE-2026-101092
SiYuan before v3.8.4 Information Disclosure via getCurrentAt
Same weakness: CWE-79
-
CVE-2026-102393
WordPress Starter Templates plugin <= 4.7.7 - Cross Site Scr -
CVE-2026-104396
WordPress Name Directory plugin <= 1.34.2 - Cross Site Scrip -
CVE-2026-102914
WordPress Presto Player plugin <= 4.5.2 - Cross Site Scripti -
CVE-2026-103084
WordPress Premium Addons for Elementor plugin <= 4.11.109 - -
CVE-2026-105060
WordPress Logo Showcase plugin <= 4.0.4 - Cross Site Scripti
V. Comments for CVE-2026-34605
No comments yet