Vulnerability Description
SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELECT payloads to searchHistory or getHistoryItems endpoints to exfiltrate deleted document content, titles, and paths.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4hjx-84f6-gr7c
- https://www.vulncheck.com/advisories/siyuan-before-3.8.7-sql-injection-via-histo
- https://github.com/siyuan-note/siyuan/security/advisories/GHSA-4hjx-84f6-gr7c
FAQ
What is CVE-2026-116170?
CVE-2026-116170 is a vulnerability with a CVSS score of 4.9 (MEDIUM). SiYuan before v3.8.7 contains an sql injection vulnerability that allows admin-token holders to read history.db by injecting unescaped op and type=3 query values. Attackers can send crafted UNION SELE...
How severe is CVE-2026-116170?
CVE-2026-116170 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-116170?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.