CVE-2026-72807

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4

Description An issue exists in attribute-view template columns that expose the queryBlocks() function. This function executes raw SQL using string substitution instead of parameterized queries, leading to a second-order SQL injection. An attacker can distribute malicious documents or packages containing crafted template columns. When these are imported and rendered, arbitrary SQL is executed on the victim's kernel, allowing unauthorized read and write access across notebooks.

Recommendations Update to version 3.7.4 or later.