PT-2026-85481 · Siyuan · Siyuan
CVE-2026-85581
·
Published
2026-09-04
·
Updated
2026-09-04
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
SiYuan versions prior to 3.8.2
Description
A denial of service issue exists in the unauthenticated '/api/system/uiproc' endpoint. The system accepts and retains process identifiers provided by the user without authentication or size limits. An attacker can send repeated requests containing unique identifiers to exhaust process memory, leading to degraded service availability.
Recommendations
Update to version 3.8.2 or later.
As a temporary mitigation, restrict access to the '/api/system/uiproc' endpoint.
Exploit
Fix
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Siyuan