CVE-2026-69083

CRITICAL

SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent

Title source: cna

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-69083. PoCs published by 0xdak.

AI-analyzed exploit summary This exploit demonstrates an unauthenticated SQL injection vulnerability (CVE-2026-69083) in SiYuan < 3.7.3 via the `/api/search/fullTextSearchAssetContent` endpoint. The PoC exploits improper string concatenation in a REGEXP clause to dump the asset-content SQLite database, enabling data exfiltration.

Description

SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Attackers can execute arbitrary SQL on the read-write asset-content database via unescaped method parameters and REGEXP clauses to read, modify, or delete cross-notebook data.

Exploits (1)

github WORKING POC

by 0xdak · pythonpoc

https://github.com/0xdak/CVE-2026-69083_exploit

View Code ZIP pw:eip

This exploit demonstrates an unauthenticated SQL injection vulnerability (CVE-2026-69083) in SiYuan < 3.7.3 via the `/api/search/fullTextSearchAssetContent` endpoint. The PoC exploits improper string concatenation in a REGEXP clause to dump the asset-content SQLite database, enabling data exfiltration.

Classification

Working Poc 99%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: SiYuan < 3.7.3

No auth needed

Prerequisites: SiYuan instance running without an `accessAuthCode` (default port 6806) · Target version < 3.7.3

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

mistral-large-3 · analyzed Aug 04, 2026 Full analysis →

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory

GitHub Security Advisory (GHSA-fph3-ghq9-vw66)

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-fph3-ghq9-vw66

Third Party Advisory third-party-advisory

VulnCheck Advisory: SiYuan before v3.7.3 SQL Injection via fullTextSearchAssetContent

https://www.vulncheck.com/advisories/siyuan-before-sql-injection-via-fulltextsearchassetcontent

Scores

CVSS v3 10.0

EPSS 0.0035

EPSS Percentile 27.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

Details

CWE

CWE-89

Status published

Products (2)

siyuan-note/siyuan < 3.7.3

siyuan-note/siyuan 3.7.3

Published Aug 03, 2026

Tracked Since Aug 03, 2026