Signal K Server versions prior to 2.31.0-beta.1 allow unauthenticated WebSocket clients to subscribe to the server's log path and receive buffered logs. This occurs because the log subscription path does not enforce authorization checks, unlike other subscription paths that apply access control. The issue arises from a code path that permits WebSocket connections before authentication for login purposes but fails to restrict access to logs. A fix requiring administrator privileges before starting the server log subscription was introduced in version 2.31.0-beta.1.