CVE-2026-74801: SiYuan before 3.7.4 Local Privilege Escalation via elevator.exe
SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion flow to execute arbitrary commands with administrator privileges after UAC approval.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74801?
CVE-2026-74801 has a high severity rating of 8.2.
What impact does CVE-2026-74801 have?
CVE-2026-74801 allows for local privilege escalation due to improper escaping of workspace directory paths.
How do I fix CVE-2026-74801?
To fix CVE-2026-74801, upgrade SiYuan to version 3.7.4 or later.
What systems are affected by CVE-2026-74801?
CVE-2026-74801 affects all versions of SiYuan prior to 3.7.4.
What is the exploit vector for CVE-2026-74801?
Attackers can exploit CVE-2026-74801 by creating a malicious workspace directory with command metacharacters.