CVE-2026-34453

CVE-2026-34453 affects SiYuan personal knowledge management systems prior to version 3.6.2, allowing unauthenticated attackers to retrieve bookmarked content from password-protected documents via the publish service. This high-severity vulnerability (CVSS 7.5) has a network attack vector and low attack complexity, leading to a complete confidentiality compromise as a nil context bypasses the required password check. While there is no evidence of active exploitation or public exploit code available in Metasploit, Nuclei, or ExploitDB, the issue has generated some community discussion.