A critical vulnerability in SiYuan PDF annotation handling allows authenticated attackers to achieve arbitrary code execution on the host system.

This is a CWE-79 vulnerability where the setFileAnnotation endpoint fails to sanitize markup injected into annotation fields. When a user opens a compromised PDF, the injected payload executes with full Node.js privileges, bypassing standard browser security boundaries.

With a CVSS score of 9.0, this vulnerability poses a high risk of total system takeover. Successful exploitation allows an attacker to execute arbitrary commands, potentially leading to the theft of sensitive user data, credential harvesting, or further lateral movement within the network.

Immediate Action: Upgrade to SiYuan version 3.7.4 or newer to ensure that annotation fields are properly escaped and sanitized before being written to disk.

Proactive Monitoring: Monitor user activity logs for suspicious PDF file access or unexpected modifications to annotation data.

Compensating Controls: Restrict the ability of users to import or annotate untrusted PDF files from external sources until the update is applied.

Public Exploit Available: No

The risk of remote code execution via document processing is significant. Organizations must treat this as a high-priority update and deploy the patch to version 3.7.4 across all instances immediately.