CVE-2026-62204

Published: Ago 22, 2026 Last Modified: Ago 22, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 5,9
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: low
User Interaction: passive
Confidentiality: N/A
Integrity: N/A
Availability: N/A
MEDIUM 6,6
Source: [email protected]
Attack Vector: local
Attack Complexity: high
Privileges Required: low
User Interaction: required
Scope: changed
Confidentiality: low
Integrity: high
Availability: low

Description

AI Translation Available

SiYuan versions before v3.7.4 fail to validate that packageName matches the downloaded package content in bazaar install endpoints. Attackers with same-origin access can overwrite existing trusted plugins by supplying mismatched packageName and repoURL parameters, achieving persistence across application restarts.

345

Insufficient Verification of Data Authenticity

Draft
Abstraction: Class Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Other
Potential Impacts:
Varies By Context Unexpected State
Applicable Platforms
Technologies: ICS/OT
View CWE Details
https://github.com/siyuan-note/siyuan/security/advisories/G…
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-rpx2-p6hp-x5gj
https://www.vulncheck.com/advisories/siyuan-before-plugin-o…
https://www.vulncheck.com/advisories/siyuan-before-plugin-overwrite-via-bazaar-…