CVE-2026-72798

creationtimestamp| type| source ---|---|--- 2026-08-13 12:02:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msxlwydfsb2k 2026-08-13 12:02:24+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117088094869425518...

CVE-2026-72798

SiYuan prior to v3.7.4 is affected. In renderAttributeView, related-database content is not properly filtered, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases. Attackers can retrieve sensitive content by requesting published datab...