SiYuan versions prior to 3.8.1 are vulnerable to server-side request forgery through a DNS rebinding attack, enabling unauthorized access to cloud metadata services and internal network resources.
SiYuan +5
ssrf
vulnerability
cloud-security
web-vulnerability
xss
information-disclosure
credential-access
cve-2026-85174
+8
2r
6t
1c
updated