# CVE-2026-73047: siyuan server-side template injection in attribute-view calculation

Source: https://junglewise.ai/threats/cve-2026-73047-siyuan-server-side-template-injection-in-attribute-view  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-15. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-73047 · Severity: medium · CVSS 6.2 · Published 2026-08-15

siyuan is a note-taking and knowledge management application. The attribute-view Template calculation feature allows users to create custom formulas to summarize data in database columns. A local attacker without authentication can inject malicious formulas that expose environment variables (including credentials or secrets) and perform DNS lookups from the server's network position, potentially revealing sensitive information or enabling reconnaissance for further attacks.

## Quick answers

**Is CVE-2026-73047 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-73047 being exploited in the wild.

**How severe is CVE-2026-73047?** Medium severity, with a CVSS score of 6.2, published 15 August 2026.

**Which products and versions are affected?** siyuan-note siyuan 3.7.0-beta.1 to 3.7.3.

**Is there a fix for CVE-2026-73047?** A patch was published on 2026-08-15: Fix available in v3.7.4 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-73047 attacked?** It is attacked with local access.

**Am I affected by CVE-2026-73047?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This is a server-side template injection (SSTI) vulnerability in the attribute-view Template calculation feature (kernel/av/calc_template.go). The templateFuncMap() function uses Sprig's unmodified TxtFuncMap() without removing the dangerous env, expandenv, and getHostByName functions—unlike BuiltInTemplateFuncs() which had these functions deleted for CVE-2024-55660 in 2024. The vulnerability is reachable locally without authentication (kernel binds to 127.0.0.1 with no per-UID access control) across all field types (Text, Number, Date, Select, MSelect, URL, Email, Phone, Block, MAsset, Created, Updated, Rollup). An attacker can inject a malicious template formula in a column definition to read environment variables belonging to the siyuan process—even from a separate unprivileged OS account—and perform DNS lookups. The payload persists in the attribute view's JSON configuration and re-executes on every document render. The vulnerability was introduced in v3.7.0-beta.1 and fixed in v3.7.4.

## Affected products

- siyuan-note siyuan 3.7.0-beta.1 to 3.7.3

## Timeline

- 2026-08-15: disclosed: CVE-2026-73047 published; GHSA-v97v-gxxg-rhmq advisory released
- 2026-08-15: patched: Fix available in v3.7.4
- 2024-12-11: other: CVE-2024-55660 fix (commit e70ed57f6) removed env, expandenv, getHostByName from BuiltInTemplateFuncs() but not from templateFuncMap()

## References

- [https://github.com/siyuan-note/siyuan/security/advisories/GHSA-v97v-gxxg-rhmq](https://github.com/siyuan-note/siyuan/security/advisories/GHSA-v97v-gxxg-rhmq)
- [https://www.vulncheck.com/advisories/siyuan-before-server-side-template-injection-via-attribute-view](https://www.vulncheck.com/advisories/siyuan-before-server-side-template-injection-via-attribute-view)