CVE-2026-72806

CVE-2026-72806 affects SiYuan versions before 3.7.4, where a vulnerability in the FilterViewByPublishAccess filter allows an authentication bypass. Unauthenticated readers can render attribute views and access password-protected document rows (titles, block IDs, column values) via renderAttribute...