CVE-2026-35593

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-35593", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-03T21:25:12.161Z", "datePublished": "2026-05-19T23:32:54.466Z", "dateUpdated": "2026-05-20T13:20:31.268Z"}, "containers": {"cna": {"title": "Trilium Notes has Local File Inclusion via upload modified file API endpoint", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-73", "lang": "en", "description": "CWE-73: External Control of File Name or Path", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp"}, {"name": "https://github.com/TriliumNext/Trilium/releases/tag/v0.102.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/TriliumNext/Trilium/releases/tag/v0.102.2"}], "affected": [{"vendor": "TriliumNext", "product": "Trilium", "versions": [{"version": "< 0.102.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-19T23:32:54.466Z"}, "descriptions": [{"lang": "en", "value": "Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Local File Inclusion, allowing an authenticated attacker to read sensitive arbitrary files from the server's filesystem. The uploadModifiedFileToAttachment function, which is called when a POST request is received to /api/attachments/{attachmentId}/upload-modified-file, replaces the content of the attachment with the content from another file (whose path is provided in filePath of Request body). After which the content of the attachment can be viewed at /api/attachments/{attachmentId}/download. This exposes sensitive system files such as SSH keys, credentials, configs, and OS files, potentially leading to remote code execution and compromise of co-hosted applications. This issue has been fixed in version 0.102.2."}], "source": {"advisory": "GHSA-hf4x-22rg-pjjp", "discovery": "UNKNOWN"}}, "adp": [{"references": [{"url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-05-20T13:20:03.275700Z", "id": "CVE-2026-35593", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-20T13:20:31.268Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-35593", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-20T13:20:03.275700Z"}}}], "references": [{"url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-05-20T13:20:26.428Z"}}], "cna": {"title": "Trilium Notes has Local File Inclusion via upload modified file API endpoint", "source": {"advisory": "GHSA-hf4x-22rg-pjjp", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "TriliumNext", "product": "Trilium", "versions": [{"status": "affected", "version": "< 0.102.2"}]}], "references": [{"url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp", "name": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/TriliumNext/Trilium/releases/tag/v0.102.2", "name": "https://github.com/TriliumNext/Trilium/releases/tag/v0.102.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Local File Inclusion, allowing an authenticated attacker to read sensitive arbitrary files from the server's filesystem. The uploadModifiedFileToAttachment function, which is called when a POST request is received to /api/attachments/{attachmentId}/upload-modified-file, replaces the content of the attachment with the content from another file (whose path is provided in filePath of Request body). After which the content of the attachment can be viewed at /api/attachments/{attachmentId}/download. This exposes sensitive system files such as SSH keys, credentials, configs, and OS files, potentially leading to remote code execution and compromise of co-hosted applications. This issue has been fixed in version 0.102.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-73", "description": "CWE-73: External Control of File Name or Path"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-05-19T23:32:54.466Z"}}}, "cveMetadata": {"cveId": "CVE-2026-35593", "state": "PUBLISHED", "dateUpdated": "2026-05-20T13:20:31.268Z", "dateReserved": "2026-04-03T21:25:12.161Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-05-19T23:32:54.466Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Trilium", "vendor": "TriliumNext", "versions": [{"status": "affected", "version": "< 0.102.2"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior are vulnerable to Local File Inclusion, allowing an authenticated attacker to read sensitive arbitrary files from the server's filesystem. The uploadModifiedFileToAttachment function, which is called when a POST request is received to /api/attachments/{attachmentId}/upload-modified-file, replaces the content of the attachment with the content from another file (whose path is provided in filePath of Request body). After which the content of the attachment can be viewed at /api/attachments/{attachmentId}/download. This exposes sensitive system files such as SSH keys, credentials, configs, and OS files, potentially leading to remote code execution and compromise of co-hosted applications. This issue has been fixed in version 0.102.2."}, {"lang": "es", "value": "Trilium Notes es una aplicaci\u00f3n de toma de notas jer\u00e1rquica de c\u00f3digo abierto y multiplataforma para construir grandes bases de conocimiento personales. Las versiones 0.102.1 y anteriores son vulnerables a la Inclusi\u00f3n Local de Ficheros, permitiendo a un atacante autenticado leer ficheros arbitrarios sensibles del sistema de ficheros del servidor. La funci\u00f3n uploadModifiedFileToAttachment, que se llama cuando se recibe una solicitud POST en /api/attachments/{attachmentId}/upload-modified-file, reemplaza el contenido del adjunto con el contenido de otro fichero (cuya ruta se proporciona en filePath del cuerpo de la solicitud). Despu\u00e9s de lo cual el contenido del adjunto puede verse en /api/attachments/{attachmentId}/download. Esto expone ficheros de sistema sensibles como claves SSH, credenciales, configuraciones y ficheros del sistema operativo, lo que podr\u00eda conducir a la ejecuci\u00f3n remota de c\u00f3digo y al compromiso de aplicaciones co-alojadas. Este problema ha sido solucionado en la versi\u00f3n 0.102.2."}], "id": "CVE-2026-35593", "lastModified": "2026-07-24T09:10:00.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.3, "impactScore": 4.0, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-35593", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-05-20T13:20:03.275700Z", "version": "2.0.3"}}]}, "published": "2026-05-20T00:16:37.433", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/TriliumNext/Trilium/releases/tag/v0.102.2"}, {"source": "security-advisories@github.com", "url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hf4x-22rg-pjjp"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-73"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,0.102.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "Trilium", "source": "cna", "vendor": "TriliumNext"}, "product": "trilium", "vendor": "triliumnext"}], "created": "2026-05-20T01:30:05.734690+00:00", "updated": "2026-05-20T01:30:06.018636+00:00", "vendors": ["triliumnext", "triliumnext$PRODUCT$trilium"]}