Read the docs
TI-2026-33471 Aliases CVE-2026-45733

Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in Electron desktop app

Priority HIGH 71CWE-693Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Security bypass, Cross-site scripting
Confidentiality · integrity · availability
High · High · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-693 and CWE-79.

Summary

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.103.0, the #iconClass label value is returned raw by getNoteIcon() and inserted without HTML attribute encoding into class attributes in apps/client/src/widgets/quick_search.ts and apps/client/src/services/note_autocomplete.ts, allowing a stored payload to execute automatically when a victim opens a new tab or uses Ctrl+J and, because Electron enables nodeIntegration and disables contextIsolation, run operating-system commands as the victim. This issue is fixed in version 0.103.0.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00433 37th percentileScored 2026-11-07
Fix Fixed Trilium (TriliumNext): 0.103.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TriliumNextTriliumbefore 0.103.00.103.0Patch availableCNA
  • Trilium VendorTriliumNext Affected before 0.103.0 Fixed in 0.103.0 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:*——TriliumNext
  • cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:* Versions — — ·TriliumNext

Remediation

  • Fix · CNA Trilium (TriliumNext) Fixed in 0.103.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-45733

References

Other 3

  • TI-2026-28300 Trilium Notes: Authentication Bypass in Clipper API for Electron (Desktop) Builds CVSS 3.1HIGH 8.6
  • TI-2026-36250 Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client CVSS 4.0CRITICAL 9.3
  • TI-2026-33410 Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled) CVSS 4.0CRITICAL 9.3
  • TI-2026-38639 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml CVSS 4.0CRITICAL 9.3
  • TI-2026-54012 Trilium unauthenticated share-search discloses password-protected and hidden shared notes CVSS 3.1HIGH 7.5
  • TI-2026-35228 Code injection in TriliumNext Trilium CVSS 4.0HIGH 8.6
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences