by Kastro
Paper/Archive/CVE-2026-69083

CVE-2026-69083

siyuan-note siyuan — SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent

EPSS 0.5%public exploitCVSS 10.0
critical.is priorityof 100
48
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 41.1.411 × 208.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

Affected

ProductAffectedFixed inSource
siyuan< 3.7.33.7.3CNA

Scores by source

VulnCheck (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
VulnCheck (CNA)9.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/siyuan-note/siyuan/security/advisories/GHSA-fph3-ghq9-vw66writeupvulncheck.com/advisories/siyuan-before-sql-injection-via-fulltextsearchassetcontent