CVE-2026-85581
CVE-2026-85581
SiYuan before v3.8.2 contains a denial of service vulnerability in the unauthenticated /api/system/uiproc endpoint that accepts and retains attacker-controlled process identifiers without size limits or authentication. Attackers can send repeated requests with unique identifiers to exhaust process memory and degrade service availability.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-85581?
- CVE-2026-85581 is a high-severity vulnerability, classified under Allocation of Resources Without Limits or Throttling. CVSS score: 7.5/10. Published 2026-09-04.
- How severe is CVE-2026-85581?
- High severity. CVSS v3 base score is 7.5 out of 10.