CVE-2026-69083
Received Received - Intake

SiYuan SQL Injection via Unauthenticated Endpoint

Publication date: 2026-08-03

Last updated on: 2026-08-03

Assigner: VulnCheck

Description
SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-03
Last Modified
2026-08-03
Generated
2026-08-03
AI Q&A
2026-08-03
EPSS Evaluated
N/A
NVD
CVE-2026-69083
EUVD
EUVD-2026-52276

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SiYuan versions before v3.7.3 have SQL injection flaws in the fullTextSearchAssetContent endpoint. These flaws allow unauthenticated users to execute arbitrary SQL commands on the database storing asset content. The vulnerability arises from unescaped method parameters and REGEXP clauses, enabling attackers to read, modify, or delete data across different notebooks.

Detection Guidance

This vulnerability involves SQL injection in SiYuan versions before v3.7.3 through the fullTextSearchAssetContent endpoint. Detection requires checking for unauthenticated access to this endpoint and verifying if SQL queries can be manipulated via REGEXP clauses or unescaped parameters. Inspect network traffic for requests to /api/fullTextSearchAssetContent with suspicious payloads.

Impact Analysis

This vulnerability allows attackers to access, alter, or delete sensitive data stored in SiYuan notebooks without authentication. They could steal confidential information, manipulate records, or disrupt operations. The impact includes data breaches, loss of integrity, and potential service disruption.

Compliance Impact

This vulnerability likely violates compliance requirements for GDPR and HIPAA due to unauthorized data access and potential data breaches. GDPR mandates strict data protection and breach notification, while HIPAA requires safeguards for protected health information. Exploitation could lead to legal penalties and reputational damage.

Mitigation Strategies

Upgrade SiYuan to version v3.7.3 or later to address the SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint and RoleReader token exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-69083. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart