CVE-2026-86192
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Sep 05, 2026
Vendor
unknown
Description
SiYuan versions before v3.8.2 fail to properly filter private attribute-view cell values in the getAttributeViewKeys endpoint. Publish readers can retrieve hidden KeyValues payloads from rows bound to inaccessible documents, exposing private database contents without authorization.