CVE-2026-116170

CVE-2026-116170CVE-2026-116170

Description

SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content, titles, and paths.

Scoring

CVSS 4.9 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Last modified2026-10-25
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.