VULNERABILITY INTELLIGENCE

CVE-2026-72807

CVSS score8 HIGH
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-08-12
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Description

SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries. Attackers can distribute malicious SiYuan documents or packages with crafted template columns that execute arbitrary SQL on a victim's kernel when the package is imported and rendered, enabling read and write access across notebooks.

Weakness classification

  • disclosure@vulncheck.com: CWE-89

Primary references