CVE-2026-32749 is a path traversal in the SiYuan knowledge management system, scored CVSS 7.6. Two import endpoints trust the uploaded file name, so an admin can write files outside the temp directory, with code execution possible. SiYuan 3.6.1 fixes it, so upgrade and avoid running the container as root.
What's affected
The advisory and NVD record both say SiYuan 3.6.0 and below are affected, and that 3.6.1 fixes it. The affected endpoints are POST /api/import/importSY and POST /api/import/importZipMd.
The attacker must be an admin. That limits the exposure for single user installs, but shared or published instances with several administrators deserve more care. The advisory says Docker containers running as root, a common default, face full container compromise.
How to check if you're exposed
Check the version in the application's About or settings page and compare it with 3.6.1. For Docker, look at the tag:
docker ps --format '{{.Names}} {{.Image}}'
Then check whether the container runs as root:
docker exec <container> id
Look at who holds admin rights on your instance. Each admin account can reach these endpoints.
What to do now
- Upgrade SiYuan to 3.6.1 or later.
- Run the container as a non root user and mount only the workspace folder it needs.
- Review the list of admin accounts and the access token or auth code settings.
- Do not expose the kernel API to the internet without authentication in front of it.
- Back up your workspace before and after the upgrade.
Why it matters
The weaknesses are CWE-22, path traversal, and CWE-73, external control of a file name or path. The code joined the temp directory with the file name taken from the upload, and a name with directory steps can leave that folder.
Writing files to arbitrary places on a host often means code execution, for example by replacing a startup file. The advisory says the same. Running as root makes that worse. The record's KEV flag is false.
Quick check
Is this exploitable by any visitor?
No. The advisory says the attacker has to be an admin. That still matters on shared instances.
Sources
Last reviewed: 19 October 2026.
