Vulnerability Description
SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion flow to execute arbitrary commands with administrator privileges after UAC approval.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vmp7-pm7g-ghcc
- https://www.vulncheck.com/advisories/siyuan-before-local-privilege-escalation-vi
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vmp7-pm7g-ghcc
FAQ
What is CVE-2026-74801?
CVE-2026-74801 is a vulnerability with a CVSS score of 8.2 (HIGH). SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace...
How severe is CVE-2026-74801?
CVE-2026-74801 has been rated HIGH with a CVSS base score of 8.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-74801?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.