high7.5
CVE-2026-87807
siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter.
Impact
siyuan versions before v3.8.2 contain an authenticated SQL injection vulnerability in the fullTextSearchBlock endpoint's method=1 query parameter. Attackers can inject UNION SELECT statements to read the entire blocks table, bypassing publish-access controls and exposing all document content and sensitive attributes.
Affected products
| Product | Affected versions |
|---|---|
| Siyuan | before 3.8.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.