Trilium's share-search endpoint fails to enforce per-note shareCredentials and shareHiddenFromTree settings, allowing unauthenticated users to request any note within a shared subtree. The response includes each matching note's title, share identifier, and hierarchical path, even if the individual note requires a password or is hidden. This flaw can be exploited as an oracle to confirm substrings and recover full contents of protected notes, exposing confidential information. The vulnerability is caused by improper authorization (CWE‑863) and information disclosure (CWE‑200).

Affected vendor TriliumNext provides the Trilium application. Versions up to and including 0.103.0 contain the flaw. The issue was fixed with the release of 0.104.0.

With a CVSS score of 7.5, the flaw is considered high severity, and the EPSS score is not currently available, so exploitation likelihood cannot be quantified. The vulnerability is not included in the CISA KEV catalog. The attack vector is an unauthenticated request to the public share-search endpoint; no prior authentication or elevated privileges are required. An attacker can supply arbitrary search queries to enumerate protected notes and reconstruct their contents, potentially exposing sensitive data.