CVE-2026-35593 Details
Description
Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Local File Inclusion, allowing an authenticated attacker to read sensitive arbitrary files from the server's filesystem. The uploadModifiedFileToAttachment function, which is called when a POST request is received to /api/attachments/{attachmentId}/upload-modified-file, replaces the content of the attachment with the content from another file (whose path is provided in filePath of Request body). After which the content of the attachment can be viewed at /api/attachments/{attachmentId}/download. This exposes sensitive system files such as SSH keys, credentials, configs, and OS files, potentially leading to remote code execution and compromise of co-hosted applications. This issue has been fixed in version 0.102.2.
A local file inclusion vulnerability has been identified in Trilium Notes versions prior to 0.102.2. This issue allows authenticated attackers to read sensitive arbitrary files from the server's filesystem. The vulnerability arises in the 'uploadModifiedFileToAttachment' function, which is triggered by a POST request to '/api/attachments/{attachmentId}/upload-modified-file'. This function replaces the content of an attachment with that of another file, specified by its path in the request body. After the file is uploaded, the attachment can be downloaded via '/api/attachments/{attachmentId}/download', potentially exposing sensitive system files such as SSH keys, credentials, configuration files, and other operating system files. This could lead to remote code execution and compromise of applications co-hosted on the same server.
Users are advised to update Trilium Notes to version 0.102.2 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 20, 2026CISA-ADP
Assessed May 20, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp | CISA-ADP | AdvisoryExploitRemedyVendor |
| https://github.com/TriliumNext/Trilium/releases/tag/v0.102.2 | [email protected] | Release NotesVendor |
| https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp | [email protected] | AdvisoryExploitRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | [email protected] |
| CWE-73 | External Control of File Name or Path | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Trilium Notes | <= 0.102.1 (semver) |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 20, 2026 | CVE Modified | CISA-ADP |
| May 20, 2026 | New CVE Received | [email protected] |