A critical stored cross-site scripting vulnerability in SiYuan allows unauthenticated attackers to achieve remote code execution via the Electron renderer.

The application fails to sanitize notebook names when rendering them within the Daily Note picker dialog. Because SiYuan utilizes an Electron architecture, this cross-site scripting flaw allows a malicious actor to escape the sandbox and execute arbitrary operating system commands with the privileges of the application.

Successful exploitation of this vulnerability poses a severe risk to organizational security. An attacker can leverage the resulting remote code execution to gain full control over the local workstation, potentially leading to data exfiltration, lateral movement within the network, or the installation of persistent backdoors. Given the CVSS score of 8.8, this vulnerability is classified as High severity and requires immediate attention to prevent compromise of critical user endpoints.

Immediate Action: Update the SiYuan application to the latest available version that includes the security patch for this specific flaw.

Proactive Monitoring: Review application logs for unusual notebook creation patterns or unexpected execution of child processes originating from the SiYuan Electron process.

Compensating Controls: Restrict application permissions where possible and ensure that users operate with the principle of least privilege to limit the impact of a potential code execution event.

Public Exploit Available: No (exploit_available: false)

The risk posed by this vulnerability is significant due to the potential for full system compromise via the Electron framework. Administrators should prioritize the deployment of the vendor provided patch to all instances of SiYuan immediately. If patching is not immediately feasible, restrict access to the application to trusted users only and monitor for any anomalous behavior on affected endpoints.