A vulnerability classified as problematic has been found in SiYuan up to 3.5.x. Affected is an unknown function of the file /api/query/sql. Performing a manipulation results in missing authorization.
This vulnerability is known as CVE-2026-29073. Remote exploitation of the attack is possible. No exploit is available.
It is recommended to upgrade the affected component.
