/Vulnerability Library

SiYuan - SQL Execution

CVE-2026-69084
Verified

Description

SiYuan <= v3.7.2 contains a SQL injection caused by passing client-supplied SQL statements verbatim to the main read-write database handle in /api/search/searchEmbedBlock, letting attackers with publish RoleReader token or anonymous access read and modify content, exploit requires publish RoleReader token or disabled publish authentication.

Severity

Critical

CVSS Score

10

Exploit Probability

2%

Published Date

August 10, 2026

Template Author

boreas37

CVE-2026-69084.yaml
10.0Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVE ID:
cve-2026-69084
CWE ID:
cwe-89

References

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-vh22-h7hf-www7https://www.vulncheck.com/advisories/siyuan-before-sql-injection-via-searchembedblockhttps://nvd.nist.gov/vuln/detail/CVE-2026-69084

Remediation Steps

Update to version v3.7.3 or later.