Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• criticalCVE-2026-54067

  CVE-2026-54067: SiYuan Stored XSS to RCE via CSS Snippet Style Tag Breakout

  A malicious CSS snippet containing </style> breaks out of its wrapping style tag in SiYuan's snippet renderer, injecting arbitrary HTML and JavaScript that escalates to full remote code execution on…

• highCVE-2026-54070

  CVE-2026-54070: SiYuan Stored XSS via Bazaar README Event Handler Bypass

  A malicious SiYuan marketplace package can embed modern HTML event handlers in its README that bypass the Lute sanitizer and run JavaScript in an Administrator's browser when they view the package…

• critical

  exploration: Malicious Remote Code Execution via Embedded Downloader

  The exploration Rust crate contained hidden code that downloaded and ran a payload from a remote server, giving an attacker arbitrary code execution on any developer machine that ran it.

• highCVE-2026-54071

  CVE-2026-54071: BabelDOC Arbitrary Code Execution via CMap Pickle Deserialization

  Opening a crafted PDF with BabelDOC can silently run attacker-supplied code, because the PDF's font encoding name is decoded and used as a file path that bypasses the trusted CMap directory and…

• high

  NotrinosERP: Authenticated Arbitrary File Upload to Remote Code Execution via HRM Employee Documents

  Any authenticated HRM operator can upload a PHP web shell through the employee Documents tab, which stores the file with its original extension inside the web root, letting the attacker execute…

• high

  safeinstall-cli Agent Guard Shell Parsing Bypass

  A crafted shell command sent to a coding agent can slip past the SafeInstall guard entirely, letting a malicious package install and run lifecycle scripts without any policy check.

• high

  mcp-atlassian: Arbitrary Server-Side File Read via Attachment Upload Path Traversal

  The mcp-atlassian server lets any remote MCP client read arbitrary files from the server's filesystem by passing a path like /etc/passwd or /proc/self/environ to the attachment upload tools, which…

• criticalCVE-2026-54158

  CVE-2026-54158: SiYuan Stored XSS to RCE via Unescaped Attribute-View Cell Rendering

  SiYuan's database cell renderer writes attacker-controlled text, URL, phone, and asset values directly into innerHTML without escaping, letting anyone who can touch a synced workspace plant a…

• criticalCVE-2026-54072

  CVE-2026-54072: Authorizer Open Redirect Leaks OAuth2 Tokens via Unvalidated redirect_uri

  Authorizer's /authorize endpoint sends a logged-in user's access, ID, and refresh tokens directly to any URL an attacker supplies, because it never checks whether the redirect_uri is in the server's…

• highCVE-2026-54063

  CVE-2026-54063: Excelize Unbounded Row Allocation DoS in Worksheet Parser

  A crafted XLSX file with a malicious row index value can crash or memory-exhaust any Go service that uses Excelize to open untrusted spreadsheets, requiring no authentication.

• criticalCVE-2026-54069

  CVE-2026-54069: SiYuan Unauthenticated Admin API Access via chrome-extension:// Origin Bypass

  Any Chrome or Chromium extension installed on a desktop running SiYuan can call every admin API endpoint without a password, because the kernel blindly trusts all chrome-extension:// origins and…

• criticalCVE-2026-54089

  CVE-2026-54089: File Browser Authentication Bypass via Proxy Header Forgery

  When File Browser is configured to use proxy authentication, anyone who can reach the server directly can impersonate any user, including admin, by sending a single forged HTTP header with no…