CVE-2025-68621

Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium's sync authentication endpoint allows unauthenticated remote attackers to recover HMAC authentication hashes byte-by-byte through statistical timing analysis. This enables complete authentication bypass without password knowledge, granting full read/write access to victim's knowledge base. This vulnerability is fixed in 0.101.0.

CVSS v3 7.4 HIGH

7.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/TriliumNext/Trilium/pull/8129	Issue Tracking Patch
https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hxf6-58cx-qq3x	Exploit Mitigation Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2026-02-06 22:16

Updated : 2026-02-24 15:14

NVD link : CVE-2025-68621

Mitre link : CVE-2025-68621

CVE.ORG link : CVE-2025-68621

JSON object : View

Products Affected

triliumnotes

trilium

CWE

CWE-208

Observable Timing Discrepancy

{"id": "CVE-2025-68621", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 2.2}]}, "published": "2026-02-06T22:16:10.660", "references": [{"url": "https://github.com/TriliumNext/Trilium/pull/8129", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/TriliumNext/Trilium/security/advisories/GHSA-hxf6-58cx-qq3x", "tags": ["Exploit", "Mitigation", "Patch", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-208"}]}], "descriptions": [{"lang": "en", "value": "Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium's sync authentication endpoint allows unauthenticated remote attackers to recover HMAC authentication hashes byte-by-byte through statistical timing analysis. This enables complete authentication bypass without password knowledge, granting full read/write access to victim's knowledge base. This vulnerability is fixed in 0.101.0."}, {"lang": "es", "value": "Trilium Notes es una aplicaci\u00f3n jer\u00e1rquica para tomar notas de c\u00f3digo abierto y multiplataforma, con enfoque en la construcci\u00f3n de grandes bases de conocimiento personales. Antes de 0.101.0, una cr\u00edtica vulnerabilidad de ataque de temporizaci\u00f3n en el punto final de autenticaci\u00f3n de sincronizaci\u00f3n de Trilium permite a atacantes remotos no autenticados recuperar hashes de autenticaci\u00f3n HMAC byte a byte mediante an\u00e1lisis estad\u00edstico de temporizaci\u00f3n. Esto permite una omisi\u00f3n completa de autenticaci\u00f3n sin conocimiento de la contrase\u00f1a, otorgando acceso completo de lectura/escritura a la base de conocimiento de la v\u00edctima. Esta vulnerabilidad est\u00e1 corregida en 0.101.0."}], "lastModified": "2026-02-24T15:14:37.663", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:triliumnotes:trilium:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B7F7FB8D-735B-494D-A4C9-C709F66BF7C4", "versionEndExcluding": "0.101.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}