CVE-2026-85174CWE-532

CVE-2026-85174

High · published September 3, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
42.5
In the wild
Unconfirmed
What it is

SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an accessible log file when full-text search requests exceed timing thresholds. Authenticated attackers can read the log file via the getFile endpoint to recover admin API tokens and gain permanent administrative access.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00508 · 42.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2026-09-03T17:06Z
References (3)
https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3wvc-5754-gp67 · [email protected]https://www.vulncheck.com/advisories/siyuan-before-3.8.2-api-token-exposure-via-log-file · [email protected]https://github.com/siyuan-note/siyuan/security/advisories/GHSA-3wvc-5754-gp67 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 05 SEP 03:44Z
    EPSS moved — → 0%
    epss
  • 03 SEP 11:22Z
    SiYuan before v3.8.2 API Token Exposure via Log File
    cvelistv5