CVE-2026-85174 SiYuan before v3.8.2 API Token Exposure via Log File

SiYuan before v3.8.2 is vulnerable to API token exposure via its log file. When full-text search requests exceed timing thresholds, API tokens passed in query parameters are written in plaintext to an accessible log file. An authenticated attacker can retrieve the log file through the getFile end...