CVE-2026-72808 | siyuan-note SiYuan up to 3.7.2 FileAnnotation getFileAnnotation information disclosure

A vulnerability marked as problematic has been reported in siyuan-note SiYuan up to 3.7.2. This vulnerability affects unknown code of the file /api/asset/getFileAnnotation of the component FileAnnotation. The manipulation leads to information disclosure.

This vulnerability is listed as CVE-2026-72808. The attack may be initiated remotely. There is no available exploit.

It is suggested to upgrade the affected component.