The SiYuan note-taking application is vulnerable to an unauthenticated remote SQL injection attack, which poses a critical risk of full data compromise and unauthorized database modification.

This is an SQL injection vulnerability (CWE-89) where the application improperly sanitizes user-supplied input before passing it to the database driver. The vulnerability is reachable by unauthenticated users or those with limited RoleReader tokens, allowing for the execution of stacked SQL statements.

The ability to execute arbitrary SQL commands grants an attacker complete control over the application database. This facilitates the unauthorized reading of sensitive user notes, the modification of stored content, and potential persistent data corruption. Given the CVSS score of 10.0, this represents the highest level of severity and requires immediate attention to prevent total system compromise.

Immediate Action: Upgrade all instances of SiYuan to version 3.7.3 or later to apply the necessary input sanitization and security constraints.

Proactive Monitoring: Monitor application logs for unusual API request patterns or database queries containing SQL syntax characters, such as semicolons or comment operators.

Compensating Controls: Deploy a Web Application Firewall (WAF) to block requests containing suspicious SQL injection patterns directed at the /api/search/searchEmbedBlock endpoint.

Public Exploit Available: Unknown

This vulnerability presents a severe risk to data integrity and confidentiality. Administrators should prioritize the update to version 3.7.3 immediately to eliminate this injection vector and secure the application against unauthorized access.