PT-2026-42225 · Unknown · Trilium Notes

Drkim-Dev · Published 2026-05-20 · Updated 2026-05-20 · CVE-2026-39311

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Trilium Notes versions prior to 0.102.2

Description Trilium Notes contains a flaw where the lack of SVG sanitization, a disabled Content Security Policy (CSP), and a publicly reachable backend execution API allow for unauthenticated Remote Code Execution (RCE). The application serves SVG attachments with the image/svg+xml MIME type without sanitization and disables the Content Security Policy middleware, which removes defenses against script execution in served assets. Due to the Same-Origin Policy, a malicious SVG can extract the csrfToken from the document body via a fetch('/') request. This token can then be used to send a signed request to the '/api/script/exec' endpoint to execute arbitrary Node.js code on the server. An attacker can compromise the server instance by tricking an authenticated user into viewing a shared SVG attachment.

Recommendations Update to version 0.102.2.

Exploit

Fix

RCE

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-39311

Affected Products

Trilium Notes

References · 4

• 🔥 https://github.com/TriliumNext/Trilium/security/advisories/GHSA-p837-cxw3-m964 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-39311 · Security Note
• https://github.com/TriliumNext/Trilium/releases/tag/v0.102.2 · Note
• https://t.me/CVEtracker/54433 · Telegram Post