Read the docs
TI-2026-38641 Aliases CVE-2026-53580

Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature

Priority HIGH 68CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service, Information disclosure
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400 and CWE-552.

Summary

Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the automatic image-download feature accepts file:// URLs in a note's img tags and reads the referenced local file with no path validation, allowing any authenticated user to disclose arbitrary files readable by the Trilium process. When a text note is saved, Trilium scans its HTML for image sources and downloads each external one; because the HTML sanitizer keeps file as an allowed scheme, a source such as file:///etc/passwd is passed straight to a filesystem read and its contents are stored as a note attachment the user can then retrieve. Pointing the same primitive at an unbounded source such as /dev/zero causes uncontrolled memory allocation that crashes the server process. The feature is enabled by default and is reachable through the web UI, the ETAPI, the web clipper, and note imports, requiring only an authenticated session or an ETAPI token. This issue is fixed in version 0.104.0

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0052 44th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Trilium (TriliumNext): 0.104.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TriliumNextTriliumbefore 0.104.00.104.0Patch availableCNA
  • Trilium VendorTriliumNext Affected before 0.104.0 Fixed in 0.104.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:*before 0.104.0VulnerableTriliumNext
  • cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:* Versions before 0.104.0 Vulnerable ·TriliumNext

Remediation

  • Fix · CNA Trilium (TriliumNext) Fixed in 0.104.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-53580

References

Exploit 1

Patch 1

  • TI-2026-36250 Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client CVSS 4.0CRITICAL 9.3
  • TI-2026-38639 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml CVSS 4.0CRITICAL 9.3
  • TI-2026-54012 Trilium unauthenticated share-search discloses password-protected and hidden shared notes CVSS 3.1HIGH 7.5
  • TI-2026-35228 Code injection in TriliumNext Trilium CVSS 4.0HIGH 8.6
  • TI-2026-38640 Trilium: Note Import to RCE via Book Note CVSS 4.0CRITICAL 9.3
  • TI-2025-42139 Trilium Notes has a Timing Attack Vulnerability in /api/login/sync CVSS 3.1HIGH 7.4
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences