CVE-2026-92985

Published: Set 17, 2026 Last Modified: Set 17, 2026

ExploitDB:

Other exploit source:

Google Dorks:

HIGH 8,6

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: active

Confidentiality: N/A

Integrity: N/A

Availability: N/A

HIGH 8,8

Source: [email protected]

Attack Vector: network

Attack Complexity: low

Privileges Required: none

User Interaction: required

Scope: unchanged

Confidentiality: high

Integrity: high

Availability: high

Description

AI Translation Available

SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to child_process for command execution.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Stable

Abstraction: Base Structure: Simple

Common Consequences

Security Scopes Affected:

Access Control Confidentiality Integrity Availability

Potential Impacts:

Bypass Protection Mechanism Read Application Data Execute Unauthorized Code Or Commands

Applicable Platforms

Technologies: AI/ML, Web Based, Web Server

Likelihood of Exploit: High

View CWE Details

https://github.com/siyuan-note/siyuan/security/advisories/G…

https://github.com/siyuan-note/siyuan/security/advisories/GHSA-jhfc-9mcq-8p8v

https://github.com/siyuan-note/siyuan

https://github.com/siyuan-note/siyuan/blob/v3.8.3/app/src/u…

https://github.com/siyuan-note/siyuan/blob/v3.8.3/app/src/util/Tree.ts#L134

https://github.com/siyuan-note/siyuan/commit/6f093ebe50afc5…

https://github.com/siyuan-note/siyuan/commit/6f093ebe50afc503e2a8b056164293054f…