8355b709-6161-47d0-bc11-cadba8dd11c1 is the GUID of a revision of the deleted-but-unlocked post As a programmer, what are some telltale signs that you're about to get fired or laid off?.
The editing URL for the post, working from the current revision, is
This page correctly fails to load for unregistered users. However, if I replace the post ID in the URL with one from a regular post that anyone can edit, the editor will load the content of the deleted post for anyone:
I realize that this might be the least significant bug I've reported, as it requires a GUID that you probably can't even get without being able to see the post in the first place. Still, for thoroughness, here it is.
/revisions/ID/GUID/diff endpoint doesn't seem to have any privileges enforced.