CVE-2026-45668: Trilium Notes : Note Import to RCE via #docName Path Traversal (Safe Import Enabled)

Synopsis

A path traversal flaw in Trilium Notes (TriliumNext) lets a malicious ZIP archive achieve remote code execution when imported with safe import enabled. The attack requires the victim to import a crafted note bundle: a payload note containing raw HTML/JS combined with a trigger note whose #docName label uses ../ traversal to load the payload through an API endpoint. Because the desktop Electron renderer runs with nodeIntegration enabled, the injected JavaScript executes with full Node.js privileges on the host. A patched-image rebuild at version 0.102.2 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityNot required

  The CVSS vector lists AV:L, meaning the attacker delivers the malicious ZIP locally (typically a file the victim imports into their Trilium client) rather than reaching the application over the network.

• AuthenticationNot required

  PR:N indicates no attacker credentials against Trilium are needed; the malicious archive carries the full payload.

• Victim interactionRequired

  UI:A requires the victim to actively import the crafted ZIP archive with safe import enabled in their Trilium client.

• Attack complexityDetail

  AC:L with AT:N indicates the exploit is reliable once the archive is imported, with no race conditions or environmental prerequisites beyond a vulnerable desktop client.

Blast Radius

• Executes arbitrary code in the Electron renderer with nodeIntegration enabled, giving the attacker full Node.js API access on the victim's machine.
• Reads, modifies, or exfiltrates any file or note content accessible to the user running the Trilium desktop client.
• Pivots to other systems reachable from the victim host, since code runs with the user's network and credential context.
• Tampers with the integrity of the local knowledge base and any synced Trilium server data the client is authenticated against.