CVE-2026-47727 Code injection in Trilium
Attackers can achieve remote code execution in Trilium by importing a malicious archive that bypasses safe import filters, leading to server-side template injection.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-47727?
CVE-2026-47727 is a high-severity code injection vulnerability in TriliumNext Trilium, published on 27 Aug 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Trilium is an open-source hierarchical note-taking application. In versions prior to 0.104.0, the default-on "Safe import" filter fails to neutralize the shareTemplate relation because that relation is not marked as dangerous, allowing an attacker-supplied import archive to plant a server-side template that leads to remote code execution. The relation is omitted from the built-in list of dangerous attributes, so unlike other code-loading relations it is not disabled on import, and when the victim later publishes the imported note the public share renderer feeds the linked EJS code note's raw bytes into ejs.render, which compiles them in the server's Node process. An unauthenticated request to the shared note then executes the attacker's JavaScript with full access to require, process, the filesystem, and the network. This issue is fixed in version 0.104.0.
Which versions are affected by CVE-2026-47727?
It affects 1 product.
Products include Triliumnotes Trilium.
How do I fix CVE-2026-47727?
No fix has been published for CVE-2026-47727 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-47727 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-47727 exists.
Other vulnerabilities in TriliumNext Trilium
- CVE-2026-48996 Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
- CVE-2026-53578 Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
- CVE-2026-53579 Trilium: Note Import to RCE via Book Note
- CVE-2026-53580 Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature
- CVE-2026-77438 Trilium unauthenticated share-search discloses password-protected and hidden shared notes
Sources
Also known as GHSA-c26q-6pwv-wf25.