EUVD-2026-74833
GHSA-9r2h-ghj5-r7hq
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessLocate SiYuan publish-mode API on network
-
DeliverySend crafted fullTextSearchBlock request with UNION SELECT payload in method=1 query
-
ExploitSQLite executes injected query against blocks table
-
ExecutionAll document blocks and attributes returned
-
ImpactDump private content bypassing publish-access controls
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Parameterized queries, prepared statements
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Persistence The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | The fullTextSearchBlock endpoint must be network-reachable on the SiYuan instance; SiYuan is often bound to localhost by default but may be exposed on LAN or internet in server/publish deployments. The description states 'authenticated SQL injection', implying at least a publish token or session credential is required to invoke the endpoint - however, the CVSS 4.0 vector carries PR:N, suggesting the vendor may consider publish-mode access sufficient to count as unauthenticated. Exploitation is limited to confidentiality impact (blocks table read) and does not achieve code execution or data modification. Instances not exposed beyond localhost are not directly reachable. |
| Impact | The provided CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N) rates this at 8.7, but the description explicitly labels it an 'authenticated SQL injection', directly contradicting the PR:N metric. If a credential or publish token is required to reach the endpoint, real-world exploitability is lower than PR:N implies. EPSS data is absent, and no KEV listing exists, suggesting this is not currently under active mass exploitation. The confidentiality impact is genuine - a successful attacker reads the full blocks table - but integrity and availability are unaffected. The true priority depends on resolving the PR:N vs. authenticated discrepancy: if the endpoint is reachable without any token on default installs, risk is higher; if publish tokens are required, risk is moderate and bounded to authorized users who escalate their read scope. |
| Exploit ScenarioDerived | An attacker who can reach the SiYuan API endpoint - either via the network or through a publish-mode session - sends a crafted GET or POST request to fullTextSearchBlock with method=1 and a query parameter containing a UNION SELECT payload. The injected query returns rows from the full blocks table alongside normal search results, allowing the attacker to iteratively dump all document content and metadata that the owner has not explicitly exposed via publish controls. The UNION-based pattern is well-documented and requires no special tooling beyond a standard HTTP client. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Sep 09, 2026
SQL injection in SiYuan's fullTextSearchBlock endpoint (versions before v3.8.2) allows read-level database access to the entire blocks table by injecting UNION SELECT statements into the method=1 query parameter. The vulnerability bypasses publish-access controls, exposing document content and sensitive block attributes that the operator intended to keep private. No public exploit or CISA KEV listing is confirmed at time of analysis, but the straightforward UNION-based injection pattern and availability of a GitHub security advisory make reproduction low-effort.
RemediationAI
Upgrade to SiYuan v3.8.2 or later, which resolves the injection per the vendor advisory GHSA-336w-67gx-gx2h. If immediate upgrade is not possible, restrict network access to the SiYuan HTTP API to localhost or a trusted VPN segment, effectively converting the AV:N vector to a local one. Do not expose SiYuan's API port directly to the internet, as this minimizes the attack surface regardless of patch status. Disabling the publish feature entirely removes the publish-access-control bypass scenario but does not patch the underlying injection.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
SiYuan (cpe:2.3:a:siyuan-note:siyuan) is a self-hosted, local-first personal knowledge management and note-taking application that stores content in a SQLite database as 'blocks'. The fullTextSearchBlock API endpoint performs full-text search and accepts a method parameter; when method=1, the query parameter is passed unsanitized into a SQL statement, allowing classic UNION SELECT injection (CWE-89). The publish-access control model in SiYuan is intended to gate which blocks or workspaces are visible to publish-mode consumers versus authenticated owners, but the injection bypasses that layer entirely by directly querying the underlying blocks table.
Know when Siyuan gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Description explicitly states 'authenticated', so PR:L; confidentiality-only impact matches UNION SELECT read-only injection with no integrity or availability effect.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and sensitive attributes.
Technical POC Analysis
CWE-89: SQL injection in SiYuan's full-text search endpoint.
Full technical POC analysis - root cause, step-by-step exploitation and patch breakdown - is part of the Pro and Business plans.
Executive ViewAI
SiYuan users face unauthorized exposure of internal documents and metadata through a SQL injection vulnerability in the search function affecting all versions before v3.8.2. Unauthenticated attackers can read the complete database table, including content marked as private or publication-restricted, creating significant confidentiality risk for organizations storing proprietary research, operational knowledge, or sensitive meeting notes.
Restrict network access to the fullTextSearchBlock endpoint using firewall rules or VPN-only authentication; deploy Web Application Firewall rules to detect and block SQL injection patterns (UNION SELECT, multiple statements) in search parameters; disable the fullTextSearchBlock functionality entirely if it is not mission-critical; monitor application logs continuously for SQL injection attack patterns; isolate sensitive SiYuan instances to air-gapped or restricted-access networks until patching; no public exploit identified at time of analysis.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
SQL injection exploits the way applications construct database queries by mixing user input directly into SQL statements.
SQL injection in SiYuan's fullTextSearchAssetContent endpoint lets unauthenticated attackers and holders of publish Role
Stored cross-site scripting in SiYuan personal knowledge management before 3.7.0 lets an attacker with write access to a
SQL injection in SiYuan personal knowledge management (versions <= v3.7.2) lets attackers pass arbitrary SQL statements
Stored cross-site scripting in SiYuan's attribute-view (database) cell renderer, affecting all versions prior to 3.7.0,
SQL injection in SiYuan personal knowledge-management software (all versions before v3.7.3) lets attackers inject arbitr
A SQL injection vulnerability was discovered in Siyuan 3.1.11 in /getHistoryItems. Rated critical severity (CVSS 9.8), t
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the ids array parameter in /batchGetBlockAttrs. R
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the id parameter at /getAssetContent. Rated criti
A SQL injection vulnerability has been identified in Siyuan 3.1.11 via the notebook parameter in /searchHistory. Rated c
SiYuan personal knowledge management system prior to 3.5.4 has a stored XSS vulnerability (CVSS 9.6) that allows code ex
Remote code execution in SiYuan note-taking application (before v3.6.1) allows any malicious Bazaar marketplace package
Origin-validation bypass in SiYuan Note (open-source personal knowledge management) before 3.7.0 lets any installed Chro
Exploit-DB