# CVE-2026-77438: Trilium unauthenticated share-search authorization bypass

Source: https://junglewise.ai/threats/cve-2026-77438-trilium-unauthenticated-share-search-authorization-bypass  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-27. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-77438 · Severity: high · CVSS 7.5 · Published 2026-08-27

Trilium is an open-source note-taking application that allows users to share note hierarchies publicly on the web. An attacker can bypass password-protection and visibility controls by exploiting a flaw in the public search endpoint, reading the titles, tree paths, and full content of notes that should be gated behind credentials or hidden from the navigation tree. This allows sensitive shared notes to be discovered and their content recovered without knowing the intended password.

Technologies: [TriliumNext Trilium](https://junglewise.ai/threats/technologies/trilium). Vendors: [TriliumNext](https://junglewise.ai/threats/vendors/triliumnext).

## Quick answers

**Is CVE-2026-77438 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-77438 being exploited in the wild.

**How severe is CVE-2026-77438?** High severity, with a CVSS score of 7.5, published 27 August 2026.

**Which products and versions are affected?** TriliumNext Trilium up to and including 0.103.0.

**Is there a fix for CVE-2026-77438?** A patch was published on 2026-07-13: Fix committed to main branch; version 0.104.0 released Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-77438 attacked?** It is attacked over the network, in a web application.

**Am I affected by CVE-2026-77438?** Check whether you run TriliumNext Trilium at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a broken access control (CWE-863) in the GET /share/api/notes search endpoint. The endpoint authorizes only the ancestor note supplied in the request, then performs a full-text search (including note content) across the entire published subtree without re-checking per-note shareCredentials or shareHiddenFromTree protections. An unauthenticated attacker can enumerate protected notes by their titles and paths, and use the endpoint as a boolean oracle to confirm arbitrary substrings of note content, recovering full contents of password-protected notes. The direct content routes enforce these controls via checkNoteAccess(), but the search endpoint bypasses this check. The vulnerability is fixed in version 0.104.0 by applying the same per-note authorization checks to search results.

## Affected products

- TriliumNext Trilium up to and including 0.103.0

## Timeline

- 2026-08-27: disclosed: Published in NVD
- 2026-07-13: patched: Fix committed to main branch; version 0.104.0 released

## References

- [https://github.com/TriliumNext/Trilium/commit/49fc7b67d9d49f01833e1ad9712ec83b079f98d2](https://github.com/TriliumNext/Trilium/commit/49fc7b67d9d49f01833e1ad9712ec83b079f98d2)
- [https://github.com/TriliumNext/Trilium/security/advisories/GHSA-6rxv-6w3q-7mv9](https://github.com/TriliumNext/Trilium/security/advisories/GHSA-6rxv-6w3q-7mv9)

## Related threats

- [Trilium arbitrary file disclosure via file:// scheme in images](https://junglewise.ai/threats/cve-2026-53580-trilium-arbitrary-file-disclosure-via-file-scheme-in-images)
- [Trilium note import RCE via unsanitized book notes](https://junglewise.ai/threats/cve-2026-53579-trilium-note-import-rce-via-unsanitized-book-notes)
- [Trilium mindMap note import remote code execution](https://junglewise.ai/threats/cve-2026-53578-trilium-mindmap-note-import-remote-code-execution)
- [Trilium note import RCE via GeoMap title injection](https://junglewise.ai/threats/cve-2026-48996-trilium-note-import-rce-via-geomap-title-injection)
- [Trilium Notes stored XSS in icon class via unencoded getNoteIcon](https://junglewise.ai/threats/cve-2026-45733-trilium-notes-stored-xss-in-icon-class-via-unencoded-getnoteicon)