Vulnerabilities

TI-2026-54012 CVE-2026-77438

Trilium unauthenticated share-search discloses password-protected and hidden shared notes

HIGH 72

Trilium is an open-source hierarchical note-taking application.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00423 Published 2026-08-27 Fixed in 0.104.0 CWE-200

TI-2026-38641 CVE-2026-53580

Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature

HIGH 68

Trilium is an open-source hierarchical note-taking application.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0052 Published 2026-08-27 Fixed in 0.104.0 CWE-400

TI-2026-38640 CVE-2026-53579

Trilium: Note Import to RCE via Book Note

MEDIUM 42

Trilium is an open-source hierarchical note-taking application.

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.00252 Published 2026-08-27 Fixed in 0.104.0 CWE-79

TI-2026-38639 CVE-2026-53578

Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml

HIGH 73

Trilium is an open-source hierarchical note-taking application.

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.00252 Published 2026-08-27 Fixed in 0.104.0 CWE-79

TI-2026-36250 CVE-2026-48996

Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client

HIGH 75

Trilium is an open-source hierarchical note-taking application.

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.00252 Published 2026-08-27 Fixed in 0.104.0 CWE-79

TI-2026-35228 CVE-2026-47727

Code injection in TriliumNext Trilium

HIGH 72

Trilium is an open-source hierarchical note-taking application.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00503 Published 2026-08-27 No fix listed CWE-1336

TI-2026-33471 CVE-2026-45733

Trilium: Stored XSS in note icon rendering leads to Remote Code Execution in Electron desktop app

HIGH 71

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.

CVSS 3.1HIGH 8.3 Network High privileges User interaction EPSS 0.00433 Published 2026-08-18 Fixed in 0.103.0 CWE-693

TI-2026-33410 CVE-2026-45668

Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)

HIGH 75

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.

CVSS 4.0CRITICAL 9.3 Local No auth User interaction EPSS 0.0017 Published 2026-05-29 Fixed in 0.102.2 CWE-22

TI-2026-28301 CVE-2026-39311

Trilium Notes: Stored XSS Leads to Unauthorized Remote Code Execution (RCE) via Unsanitized SVG Attachments

MEDIUM 63

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00288 Published 2026-05-20 Fixed in 0.102.2 CWE-79

TI-2026-28300 CVE-2026-39310

Trilium Notes: Authentication Bypass in Clipper API for Electron (Desktop) Builds

HIGH 76

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00391 Published 2026-05-20 Fixed in 0.102.2 CWE-284

TI-2026-28299 CVE-2026-39309

Trilium Notes: macOS TCC Bypass via Prompt Spoofing

MEDIUM 58

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00176 Published 2026-05-19 Fixed in 0.102.2 CWE-290

TI-2026-27696 CVE-2026-35593

Trilium Notes has Local File Inclusion via upload modified file API endpoint

MEDIUM 63

Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00621 Published 2026-05-19 Fixed in 0.102.2 CWE-22

TI-2025-42139 CVE-2025-68621

Trilium Notes has a Timing Attack Vulnerability in /api/login/sync

LOW 35

Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00565 Published 2026-02-06 Fixed in 0.101.0 CWE-208

TI-2025-33488 CVE-2025-53544

Trilium Notes is Vulnerable to Brute-force Protection Bypass via Initial Sync Seed Retrieval

HIGH 72

Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2025-08-05 Fixed in 0.97.0 CWE-307

TI-2022-02113 CVE-2022-2290 · GHSA-4fjp-3mcp-2938

Cross-site Scripting (XSS) - Reflected in zadam/trilium

LOW 33

Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02916 Published 2022-07-03 Fixed in 0.53.1-beta, 0.52.4 CWE-79

Vulnerabilities

Filters