{"id":"CVE-2026-93922","published":"2026-09-19T00:16:57.783","lastModified":"2026-09-22T16:18:14.603","description":"SiYuan through 3.8.4 renders notebook names as raw HTML in the Daily Note picker dialog without escaping, allowing stored cross-site scripting in the Electron renderer. Attackers can create notebooks with HTML payloads in names that execute JavaScript with Node.js access when the picker opens, enabling operating system command execution.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-79"],"vendors":[],"products":[],"references":[{"url":"https://github.com/siyuan-note/siyuan","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/blob/v3.8.4/app/src/util/mount.ts#L72","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/blob/v3.8.4/kernel/model/file.go#L2446-L2454","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8c2m-33v9-vvqm","tags":[]},{"url":"https://www.vulncheck.com/advisories/siyuan-through-3.8.4-stored-xss-via-notebook-names","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8c2m-33v9-vvqm","tags":[]}],"exploitRefs":[{"url":"https://github.com/siyuan-note/siyuan","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/blob/v3.8.4/app/src/util/mount.ts#L72","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/blob/v3.8.4/kernel/model/file.go#L2446-L2454","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8c2m-33v9-vvqm","tags":[]},{"url":"https://github.com/siyuan-note/siyuan/security/advisories/GHSA-8c2m-33v9-vvqm","tags":[]}],"hasPoc":true,"ai":{"summary":"This flaw allows attackers to inject HTML payloads into notebook names, which can execute JavaScript with Node.js access when the Daily Note picker dialog opens, leading to potential operating system command execution.","exploitability":"Exploitation is relatively straightforward as attackers can create notebooks with malicious names, and the flaw is present in the Electron renderer.","blast_radius":"If exploited, this could lead to full system compromise, as the attack can execute arbitrary JavaScript and potentially command execution.","remediation":"Upgrade to SiYuan 3.8.5 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","xss","os-commands"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-29T09:20:59.513Z"}}