Which versions of Trilium Notes are affected by EUVD-2026-33376?

TriliumNext Trilium Notes desktop client versions prior to 0.102.2 contains a critical remote code execution vulnerability exploitable through a deceptively simple user action-importing a crafted…. A patch is available.

How to fix or mitigate EUVD-2026-33376?

Within 24 hours: Scan environment to identify all TriliumNext Trilium Notes installations prior to version 0.102.2; send urgent notification advising users to avoid importing ZIP files from untrusted sources and defer optional imports until patched. Within 7 days: Deploy version 0.102.2 or later across all instances; verify 100% patch completion through inventory audit. Within 30 days: Conduct forensic review of file import logs for malicious content, implement endpoint restrictions on file import functionality, and review access logs for post-exploitation activity indicators.

Trilium Notes EUVD-2026-33376

Q: What is the CVSS score of EUVD-2026-33376?

EUVD-2026-33376 has a CVSS 4.0 base score of 9.3 (Critical). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

| CVE-2026-45668 CRITICAL

Path Traversal (CWE-22)

2026-05-29 GitHub_M

XSS Path Traversal Trilium

9.3

CVSS 4.0 · Vendor: GitHub_M

Severity by source

Vendor (GitHub_M) PRIMARY

9.3 CRITICAL

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (GitHub_M) · only source for this CVE.

CVSS VectorVendor: GitHub_M

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Scope

Lifecycle Timeline

Analysis Generated

May 29, 2026 - 20:00 vuln.today

Patch available

May 29, 2026 - 19:01 EUVD

CVSS changed

May 29, 2026 - 18:22 NVD

9.3 (CRITICAL)

CVE Published

May 29, 2026 - 17:18 nvd

UNKNOWN (no severity yet)

DescriptionCVE.org

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.102.2, a malicious ZIP archive imported with safe import enabled achieves RCE via #docName path traversal and XSS by combining a payload note (type: code, mime: text/plain) containing raw HTML/JS and a trigger note (type: doc or type: launcher) with a #docName label that uses ../ path traversal to point at the payload note's API endpoint. The desktop client Electron renderer runs with nodeIntegration enabled, so an RCE is triggered once the payload is executed. This vulnerability is fixed in 0.102.2.

AnalysisAI

Remote code execution in TriliumNext Trilium Notes desktop client prior to 0.102.2 allows attackers to achieve arbitrary code execution by tricking a user into importing a malicious ZIP archive with safe import enabled. The flaw chains a #docName path traversal (CWE-22) with stored XSS, and the Electron renderer's nodeIntegration=true setting elevates the XSS into full host RCE. No public exploit identified at time of analysis, but the vendor advisory describes a complete working chain and the CVSS 4.0 score of 9.3 reflects subsequent-system impact.

Technical ContextAI

Trilium is an open-source hierarchical note-taking application built on Electron, with a desktop client whose renderer process is configured with Node.js integration enabled - meaning any JavaScript executing in the renderer can invoke Node APIs (child_process, fs) and break out of the browser sandbox. The vulnerability sits at the intersection of two flaws: a CWE-22 path-traversal weakness in how the #docName label resolves API endpoints (using ../ sequences to redirect to an attacker-supplied payload note), and an XSS sink where a note of type 'code' with mime 'text/plain' has its raw HTML/JavaScript rendered when reached via a 'doc' or 'launcher' trigger note. The affected product per CPE is cpe:2.3:a:triliumnext:trilium up to 0.102.2.

RemediationAI

Upgrade to Trilium 0.102.2 or later, which is the vendor-released patch confirmed in the GitHub Security Advisory GHSA-9jjc-cccq-f6rh (https://github.com/TriliumNext/Trilium/security/advisories/GHSA-9jjc-cccq-f6rh). Until patched, disable the 'safe import' feature and refuse ZIP imports from untrusted sources - the trade-off is loss of the import workflow for legitimate archives. Operators can further reduce blast radius by running the web/server variant rather than the desktop Electron client, since the RCE escalation depends on nodeIntegration=true in the renderer; this trades convenience and offline use for sandbox confinement. Inspect any recently imported archives for code-type notes containing raw HTML/JavaScript and trigger notes carrying #docName labels with ../ sequences.