Is CVE-2026-86192 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-86192?

CVE-2026-86192 has a CVSS v3 severity of MEDIUM (6.5).

Back

CVE-2026-86192

Description

SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payloads from rows bound to inaccessible documents, exposing private database contents without authorization.