CVE-2026-74801

8.6 highEPSS 0.2%

High (8.6). EPSS 0.2% chance of exploitation in the next 30 days.

SiYuan before 3.7.4 fails to properly escape workspace directory paths when constructing command-line arguments for the elevated elevator.exe helper process. Attackers can create a malicious workspace directory with command metacharacters in its path and trigger the Microsoft Defender exclusion flow to execute arbitrary commands with administrator privileges after UAC approval.

Severity

CVSS 4.0

8.6 high

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CVSS 3.1

8.2 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2026-08-17
Modified: 2026-08-26
Record from: the NVD, synced 2026-10-19

References

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vmp7-pm7g-ghcc
https://www.vulncheck.com/advisories/siyuan-before-local-privilege-escalation-via-elevator-exe
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vmp7-pm7g-ghcc

Check your stack JSON