SiYuan kernel versions up to 3.7.2 contain a vulnerability where the getGraph and getLocalGraph endpoints do not validate the publish-password tier. This allows anonymous users to access block-level content of password-protected documents without providing a password. The vulnerability has a critical severity with a CVSS score of 8.6. The advisory is a duplicate of GHSA-vpjw-wf5h-cgpq and no patch links are provided in this record.