SiYuan versions up to 3.7.2 have a vulnerability that exposes encrypted-notebook key-derivation material and wrapped notebook keys through unauthenticated endpoints in publish mode. This exposure allows attackers to obtain Argon2id parameters and wrapped keys, enabling unlimited offline cracking of the master password without rate limiting. The vulnerability has a high severity score of 7.5 and affects confidentiality but not integrity or availability.