CVE-2026-101091 | Siyuan Note SiYuan up to 3.8.3 Block Query Embed siyuan.db sql injection

September 28, 2026 Yanac

A vulnerability classified as critical was found in Siyuan Note SiYuan up to 3.8.3. The affected element is an unknown function of the file siyuan.db of the component Block Query Embed. Executing a manipulation can lead to sql injection.

This vulnerability appears as CVE-2026-101091. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More