CVE-2026-85581
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Sep 04, 2026
Vendor
unknown
Description
SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers without size limits or authentication. Attackers can send repeated requests with unique identifiers to exhaust process memory and degrade service availability.