Medium 6.9

SiYuan before v3.8.7 SQL Injection via History Search op and query

CVE-2026-116170 First seen on SecPulse Oct 25, 22:20

Affected packages

Ecosystem	Package	Affected → Fixed	Fixed
siyuan-note	siyuan-notesiyuan	< 3.8.7→ 3.8.7	3.8.7

Original description The description as published by the source.

SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content, titles, and paths.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

advisory github.com
advisory vulncheck.com
advisory nvd.nist.gov
advisory github.com
web github.com

Key facts

CVSS v3: Medium 4.9; CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4: Medium 6.9; CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Published: Oct 25, 2026
First seen on SecPulse: Oct 25, 22:20
GHSA: GHSA-4hjx-84f6-gr7c
CWE: CWE-89

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

SQL Injection

CWE

CWE-89

All

Siyuan Note Siyuan

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 31, 11:30
NIST National Vulnerability DatabaseOct 30, 02:18
GitHub Security Advisories (Global)Oct 26, 00:32
CVE.org (CVE Program・cvelistV5)Oct 30, 01:13