Security Advisory
CVE-2026-85581
7.5
HIGH
Vulnerability Description
SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers without size limits or authentication. Attackers can send repeated requests with unique identifiers to exhaust process memory and degrade service availability.
Published Date
September 4, 2026
Official Source
NIST NVD Advisory