CVE-2026-45733
Received Received - Intake

Stored XSS in Trilium Notes Prior to 0.103.0

Publication date: 2026-08-18

Last updated on: 2026-08-18

Assigner: GitHub, Inc.

Description
Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Prior to 0.103.0, the #iconClass label value is returned raw by getNoteIcon() and inserted without HTML attribute encoding into class attributes in apps/client/src/widgets/quick_search.ts and apps/client/src/services/note_autocomplete.ts, allowing a stored payload to execute automatically when a victim opens a new tab or uses Ctrl+J and, because Electron enables nodeIntegration and disables contextIsolation, run operating-system commands as the victim. This issue is fixed in version 0.103.0.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-18
Last Modified
2026-08-18
Generated
2026-08-18
AI Q&A
2026-08-18
EPSS Evaluated
N/A
NVD
CVE-2026-45733
EUVD
EUVD-2026-60956

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
triliumnext trilium to 0.103.0 (exc)
zettelkasten trilium_notes 0.103.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-83 The product does not neutralize or incorrectly neutralizes "javascript:" or other URIs from dangerous attributes within tags, such as onmouseover, onload, onerror, or style.
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
CWE-693 The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Trilium Notes before version 0.103.0 has a stored cross-site scripting (XSS) vulnerability. The #iconClass label value is returned raw and inserted without HTML encoding into class attributes in two files. This allows a malicious payload to execute when a victim opens a new tab or uses Ctrl+J. Due to Electron's nodeIntegration and disabled contextIsolation, the payload can run operating-system commands as the victim.

Detection Guidance

This vulnerability involves stored payloads in Trilium Notes that execute when a victim opens a new tab or uses Ctrl+J. Detection requires checking Trilium Notes versions prior to 0.103.0 and inspecting note content for malicious #iconClass values or scripts.

Impact Analysis

If you use Trilium Notes before 0.103.0, an attacker could trick you into opening a malicious note. This could lead to arbitrary code execution on your system, potentially allowing the attacker to steal data, install malware, or take control of your device.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations using affected versions may face compliance breaches, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade Trilium Notes to version 0.103.0 or later immediately. Disable nodeIntegration and enable contextIsolation in Electron settings if custom configurations are used. Review and sanitize stored notes for malicious payloads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-45733. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart