CVE-2026-85174 | siyuan-note SiYuan up to 3.8.1 Log File getFile Query missing encryption

A vulnerability described as problematic has been identified in siyuan-note SiYuan up to 3.8.1. This impacts the function getFile of the component Log File. Such manipulation of the argument Query leads to missing encryption of sensitive data.

This vulnerability is documented as CVE-2026-85174. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More