CVE-2026-73047

If you're running Siyuan 3.7.x with the attribute-view feature enabled, you have a templating injection surface that reuses a known-dangerous pattern. The attribute-view Template feature introduced in v3.7.0-beta.1 pulls in Sprig's full function map — including env, expandenv, and getHostByName, which were already identified as dangerous in CVE-2024-55660 against a different product. This isn't a novel attack; it's a documented dangerous pattern that was re-implemented in new code without apparent awareness of the prior CVE. The CVSS 6.2 rating is misleading. While the vendor describes the attacker as 'local, unauthenticated,' the actual risk depends on your deployment model. In containerized or shared-hosting environments where Siyuan runs as a service account, exploitation can read environment variables belonging to separate unprivileged OS accounts — that's an inter-account disclosure vector, not a narrow local read. The localhost binding (127.0.0.1) that factors into the CVSS calculation is frequently overridden in production for accessibility, making this network-exploitable without authentication in practice. Your immediate actions: verify whether Siyuan listens on 0.0.0.0 rather than 127.0.0.1; if it does, treat this as network-exploitable. Check whether the v3.7.4 patch removes only the three named functions or strips Sprig's function map selectively — if it's the former, assume template primitives (json, type conversion) remain chainable. The deeper concern is whether this represents a recurring pattern: new features touching the template engine will inherit this function map unless Siyuan adopts an architectural fix rather than a symptomatic one.

Reviewed through automated stages and approved by a human before publication.