CVE-2026-123492

SiYuan versions prior to 3.8.9 are vulnerable to a nil pointer dereference within the privateCacheMiddleware component. This flaw allows authenticated attackers possessing a valid API token to crash the kernel by sending a resources/read request during an initialized MCP session. Specifically, at...