CVE-2026-87807 siyuan-note CVE debrief

Who should care

Defenders and administrators using siyuan versions before v3.8.2 should assess their exposure and prioritize updating to v3.8.2 or later. Those responsible for monitoring and securing access to the fullTextSearchBlock endpoint should implement compensating controls to prevent unauthorized access.

Why it matters

CVE-2026-87807 is an authenticated SQL injection vulnerability in siyuan before v3.8.2, allowing attackers to read the entire blocks table by injecting UNION SELECT statements. Defenders should prioritize verifying exposure, especially for those using affected versions, and implement immediate actions to prevent potential disclosure of document content and sensitive attributes.

• Potential disclosure of all document content and sensitive attributes due to bypassed publish-access controls.
• Possible unauthorized access to sensitive information through injected SQL statements.
• Need for verification of system exposure and impact.
• Priority on updating to v3.8.2 or later to mitigate the vulnerability.

Technical summary

The vulnerability exists in the fullTextSearchBlock endpoint's method=1 query parameter of siyuan versions before v3.8.2. An attacker can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls. This could lead to the exposure of all document content and sensitive attributes. The vulnerability allows attackers to inject malicious SQL statements, potentially resulting in unauthorized access to sensitive information. Defenders should prioritize verifying exposure and assessing the impact on their systems, especially those using siyuan versions before v3.8.2.

Defensive priority

Defenders should prioritize verifying exposure and assessing the impact on their systems, especially those using siyuan versions before v3.8.2. Immediate actions include updating to v3.8.2 or later and implementing compensating controls to monitor and restrict access to the fullTextSearchBlock endpoint.

Recommended defensive actions

• Verify if the system uses siyuan versions before v3.8.2 and update to v3.8.2 or later.
• Implement compensating controls to monitor and restrict access to the fullTextSearchBlock endpoint.
• Review and adjust publish-access controls to prevent unauthorized access to document content and sensitive attributes.
• Conduct a thorough review of system configurations and user access levels to identify potential vulnerabilities.
• Perform a vulnerability assessment to determine the potential impact of the SQL injection vulnerability on the system.
• Develop and implement a patch management process to ensure timely application of security updates.
• Monitor system logs and implement additional security controls to detect and prevent potential attacks.

Evidence notes

The CVE record and source item provide details on the vulnerability, including its existence in siyuan versions before v3.8.2 and the potential for attackers to inject SQL statements. However, specific details on exploitation and victim impact are limited.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.