CVE-2026-73054

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4

Description An authentication bypass exists in the WebSocket endpoint due to differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can use a malicious WebSocket URI containing duplicated query parameters to bypass access auth code validation. This allows the attacker to receive the live kernel event stream, which includes document identifiers, titles, and operation logs.

Recommendations Update SiYuan to version 3.7.4 or later.