Is CVE-2026-85581 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-85581?

CVE-2026-85581 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-85581

Description

SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers without size limits or authentication. Attackers can send repeated requests with unique identifiers to exhaust process memory and degrade service availability.