Skip to content
OpenAdvisories

Vendor

TriliumNext

14 known vulnerabilities.

Products

Trilium 14
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.8
    CVE-2026-39311

    Trilium Notes: Stored XSS Leads to Unauthorized Remote Code Execution (RCE) via Unsanitized SVG Attachments

    Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Versions 0.102.1 and prior contain a critical security flaw where lack of SVG sanitization combined with a disabled Content Security Po…

    TriliumNext Trilium
  • Medium 5.5
    CVE-2026-39309

    Trilium Notes: macOS TCC Bypass via Prompt Spoofing

    Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configuration is vulnerable to TCC Bypass via Prompt Spoofing, allowing local attackers to …

    TriliumNext Trilium
  • Medium 6.8
    CVE-2026-35593

    Trilium Notes has Local File Inclusion via upload modified file API endpoint

    Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Local File Inclusion, allowing an authenticated attacker to read sensitive arbitrary…

    TriliumNext Trilium