CVE-2026-92985

8.8 HIGHpublic exploit available

Published 2026-09-17 · Updated 2026-09-17

AI risk analysis

Summary: SiYuan versions before 3.8.4 fail to properly escape HTML in bookmark labels, allowing attackers to inject scripts that can execute commands via the Electron renderer.
Exploitability: Exploitation is relatively straightforward given the preconditions of user interaction with a malicious .sy notebook file.
Blast radius: If exploited, this flaw could lead to full system compromise through command execution.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Upgrade to SiYuan 3.8.4 or later.

rcewebscriptinghtml-injection

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

SiYuan versions before 3.8.4 fail to escape bookmark labels imported from notebook files when rendering them in the dock tree. Attackers can craft malicious .sy notebook files with unescaped HTML in bookmark attributes that execute scripts in the Electron renderer with access to child_process for command execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE-79

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.