# CVE-2026-53579: Trilium note import RCE via unsanitized book notes

Source: https://junglewise.ai/threats/cve-2026-53579-trilium-note-import-rce-via-unsanitized-book-notes  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-27. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-53579 · Severity: info · CVSS 9.3 · Published 2026-08-27

Trilium is an open-source note-taking application that allows users to import notes from archive files. A flaw in the "Safe import" security filter fails to sanitize HTML content in book-type notes, while sanitizing text notes correctly. An attacker can craft a malicious import archive containing a book note with embedded JavaScript that executes when the note is displayed. On the desktop client, this JavaScript runs with full system access and can execute arbitrary commands on the victim's machine.

Technologies: [TriliumNext Trilium](https://junglewise.ai/threats/technologies/trilium). Vendors: [TriliumNext](https://junglewise.ai/threats/vendors/triliumnext).

## Quick answers

**Is CVE-2026-53579 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-53579 being exploited in the wild.

**How severe is CVE-2026-53579?** Informational severity, with a CVSS score of 9.3, published 27 August 2026.

**Which products and versions are affected?** TriliumNext Trilium up to and including 0.103.0.

**Is there a fix for CVE-2026-53579?** A patch was published on 2026-08-27: fixed in version 0.104.0 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-53579 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-53579?** Check whether you run TriliumNext Trilium at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an HTML injection / cross-site scripting (XSS) that escalates to remote code execution on the desktop client. Root cause: the import sanitization function `processTextNoteContent()` is only called for notes with type "text", but book notes follow the same rendering path through `renderText()` and `content_renderer.getRenderedContent()`, where unsanitized content is injected into the page via jQuery's `.html()` method. Attack vector is local and requires user interaction (importing a malicious archive). On Electron-based desktop clients with `nodeIntegration` enabled, the injected JavaScript can call `require('child_process').exec()` to execute system commands. The vulnerability affects Trilium versions up to 0.103.0 and is fixed in 0.104.0.

## Affected products

- TriliumNext Trilium up to and including 0.103.0

## Timeline

- 2026-08-27: disclosed
- 2026-08-27: patched: fixed in version 0.104.0

## References

- [https://github.com/TriliumNext/Trilium/commit/abb01f09b3ad7792bd3d42a973730c99a062a808](https://github.com/TriliumNext/Trilium/commit/abb01f09b3ad7792bd3d42a973730c99a062a808)
- [https://github.com/TriliumNext/Trilium/security/advisories/GHSA-h7w4-cjfg-cvj8](https://github.com/TriliumNext/Trilium/security/advisories/GHSA-h7w4-cjfg-cvj8)

## Related threats

- [Trilium unauthenticated share-search authorization bypass](https://junglewise.ai/threats/cve-2026-77438-trilium-unauthenticated-share-search-authorization-bypass)
- [Trilium arbitrary file disclosure via file:// scheme in images](https://junglewise.ai/threats/cve-2026-53580-trilium-arbitrary-file-disclosure-via-file-scheme-in-images)
- [Trilium mindMap note import remote code execution](https://junglewise.ai/threats/cve-2026-53578-trilium-mindmap-note-import-remote-code-execution)
- [Trilium note import RCE via GeoMap title injection](https://junglewise.ai/threats/cve-2026-48996-trilium-note-import-rce-via-geomap-title-injection)
- [Trilium Notes stored XSS in icon class via unencoded getNoteIcon](https://junglewise.ai/threats/cve-2026-45733-trilium-notes-stored-xss-in-icon-class-via-unencoded-getnoteicon)