What is the CVSS score of CVE-2026-59834?

CVE-2026-59834 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 0.4%.

Which versions of SiYuan are affected by CVE-2026-59834?

SiYuan versions before 3.7.1 enable unauthenticated users to access protected documents through a search feature flaw, exposing confidential information to any internet visitor.. A patch is available.

Is there a public PoC exploit available for CVE-2026-59834?

Yes, a public proof-of-concept exploit is available for CVE-2026-59834. Prioritise patching immediately. EPSS: 0.4%.

How to fix or mitigate CVE-2026-59834?

Within 24 hours: Identify all SiYuan instances with publish mode enabled; assume all protected documents have been exposed and conduct a data impact assessment. Within 7 days: Implement network-level or application-level access controls to restrict SiYuan's search endpoint to trusted users only; disable publish mode on instances containing sensitive data if operationally feasible. Within 30 days: Establish a process to upgrade to SiYuan 3.7.1 or later immediately upon release; if patching cannot be achieved within 90 days, evaluate alternative document management platforms to ensure long-term data security posture.

SiYuan CVE-2026-59834

EUVD-2026-42742 HIGH

SQL Injection (CWE-89)

2026-07-09 GitHub_M

GHSA-h89q-4j2h-7h88

SQLi Siyuan Siyuan Note

7.5

CVSS 3.1 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

vuln.today AI

7.5 HIGH

Unauthenticated publish visitor reaches the endpoint over the network with a simple UNION payload (AV:N/AC:L/PR:N/UI:N); impact is disclosure of hidden documents only, so C:H, I:N, A:N.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (GitHub_M).

CVSS VectorVendor: GitHub_M

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Sep 02, 2026 - 16:02 EUVD

Analysis Generated

Jul 09, 2026 - 23:24 vuln.today

DescriptionCVE.org

SiYuan is an open-source personal knowledge management system. Prior to 3.7.1, the block search endpoint POST /api/search/fullTextSearchBlock concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes, allowing an unauthenticated publish visitor to inject a UNION SELECT and return rows from hidden documents by projecting an allowed visible box and path. This issue is fixed in versions 3.7.1.

AnalysisAI

SQL injection in SiYuan's block-search endpoint (POST /api/search/fullTextSearchBlock) before version 3.7.1 lets an unauthenticated publish-mode visitor read documents they should not see. The endpoint concatenates attacker-controlled paths values directly into SQL predicates used by its non-SQL search modes, enabling a UNION SELECT that projects rows from hidden documents by spoofing an allowed visible box and path. No public exploit has been identified at time of analysis, and the issue is not listed in CISA KEV; CVSS is 7.5 reflecting confidentiality-only impact.

Technical ContextAI

SiYuan is a self-hosted, open-source personal knowledge management (PKM) system that stores notes as 'blocks' indexed in an embedded SQL database (SQLite). Its 'publish' feature exposes a read-only web view of selected notebooks to visitors. The full-text block search endpoint supports several search modes; for the non-SQL modes it still builds SQL predicates internally, and the user-supplied paths filter is string-concatenated into those predicates rather than bound as a parameter. This is a textbook CWE-89 (Improper Neutralization of Special Elements used in an SQL Command) flaw: because the input reaches the query as raw SQL, an attacker can close the intended predicate and append a UNION SELECT that returns arbitrary rows, bypassing the visibility scoping that normally restricts a publish visitor to permitted boxes and paths.

RemediationAI

Vendor-released patch: 3.7.1 - upgrade all SiYuan instances to 3.7.1 or later, which fixes the input handling in the search endpoint (see commits 57bcad4b331836880bfe6be25d4180bdcf10db0d and d0f0fe146fb07d594fcadc4f48d4f7c30ac01d1e and the release at https://github.com/siyuan-note/siyuan/releases/tag/v3.7.1). Until you can patch, the most effective compensating control is to disable or take offline the publish feature so no unauthenticated visitor can reach POST /api/search/fullTextSearchBlock, at the cost of losing public note sharing; alternatively place the published instance behind an authenticating reverse proxy or IP allowlist, or block/restrict access to the /api/search/ path at the proxy, accepting that this may break legitimate visitor search functionality. Refer to the advisory GHSA-h89q-4j2h-7h88 for vendor guidance.