Publish-boundary bypass via WebSocket broadcast in SiYuan (CVE-2026-72810)

SiYuan's kernel registers WebSocket sessions established through the publish surface into the same broadcast session pool as authenticated sessions, with no role or publish-access filtering applied to outgoing content events. Because content is pushed directly from the kernel's edit pipeline to all open sockets and never passes through an HTTP handler, existing publish-access filters on HTTP endpoints are not in the path. An anonymous reader (publish mode with authentication disabled) who holds a WebSocket connection open passively receives a real-time feed of every edit made in the workspace, including block DOM, attributes, titles, and document structure for password-protected, publish-forbidden, and unpublished documents. Affected versions: - <=v3.7.2 We recommend updating to: v3.7.4. CVSS 9.2 · our assessment: act_now Reference: https://github.com/siyuan-note/siyuan/security/advisories/GHSA-mw8r-mw84-88v2 Details: https://vuln.today/cve/CVE-2026-72810