CVE-2026-74867: SiYuan before 3.7.4 Cross-Site Request Forgery via CheckAuth
SiYuan versions before 3.7.4 contain a cross-site request forgery vulnerability in the session-cookie authentication branch of CheckAuth() that lacks Origin/Referer validation and sets no explicit SameSite attribute on session cookies. Attackers can craft malicious web pages that perform unauthorized actions on behalf of authenticated users by submitting requests with valid session cookies, relying on browser default SameSite policies rather than server-enforced protections.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
SiYuanto a version that resolves this vulnerability.Fixed in 3.7.4 - Configuration
In CheckAuth() session-cookie authentication, enforce Origin and/or Referer validation to prevent CSRF.
SiYuan CheckAuth() session-cookie authentication Origin/Referer validation = required - Configuration
Set an explicit SameSite attribute on session cookies (rather than relying on browser default SameSite behavior) to reduce CSRF risk.
SiYuan session cookies SameSite attribute = explicit
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74867?
The severity of CVE-2026-74867 is medium with a score of 4.2.
How do I fix CVE-2026-74867?
To fix CVE-2026-74867, upgrade SiYuan to version 3.7.4 or later.
What type of vulnerability is CVE-2026-74867?
CVE-2026-74867 is a cross-site request forgery (CSRF) vulnerability.
What impact does CVE-2026-74867 have?
CVE-2026-74867 allows attackers to craft malicious webpages that can perform unauthorized actions on behalf of victims.
What specific feature is affected by CVE-2026-74867?
CVE-2026-74867 affects the session-cookie authentication branch of the CheckAuth() function.