EdgeEver: Stored Cross-Site Scripting in template preview
Summary
EdgeEver, an open-source notes and knowledge base app with MCP support, renders template Markdown as raw HTML without sanitization. An attacker with a valid API or MCP token can store a template with HTML event handlers that run script when a user opens the template preview. The script can then access the privileged window.edgeeverDesktop bridge. A victim must open the preview.
Affected
- EdgeEver 1.6.0 through 1.112.0 (per CVE record and VulnCheck)
- Template preview in TemplatesPane.tsx
- Versions 2.x: unclear, not confirmed by the vendor
Fixed in
Unknown. A fix in 1.113.0 is reported by a third party but not confirmed by the vendor.
Workaround
- No vendor-published workaround.
- Revoke or limit API and MCP tokens and review who can create templates.
- Review recently added templates and treat their content as untrusted.
Exploitation
- Public proof of concept available (GitHub issue 533).
- CISA SSVC: exploitation poc, not automatable, total technical impact.
- No confirmed exploitation in the wild.
Our recommendation
- Identify EdgeEver instances in the affected version range and check whether they are reachable from the internet.
- Restrict token issuance and revoke unneeded API and MCP tokens.
- Keep the desktop app away from sensitive systems until a confirmed fixed version is installed.
- Monitor the vendor repository and update as soon as a fix is confirmed.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulnCheck advisory www.vulncheck.com
- TemplatesPane.tsx at f6ade70 (vulnerable code) github.com
- Patch commit 6b5027e (not verified) github.com
- EdgeEver GitHub issue 533 github.com
- EdgeEver GitHub issue 546 github.com
- OSV entry CVE-2026-109558 osv.dev
- Rapid7 via Vulners vulners.com
- EdgeEver repository github.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 10:51.
Original description (NVD)
EdgeEver 1.6.0 through 1.112.0 contains a stored cross-site scripting vulnerability in TemplatesPane.tsx that renders template contentMarkdown with raw HTML via dangerouslySetInnerHTML without sanitization. Attackers can write templates containing HTML event handlers through an API or MCP token to run script on preview and access the privileged window.edgeeverDesktop bridge.
NVD references (7)
- https://github.com/tianma-if/edgeever
- https://github.com/tianma-if/edgeever/blob/f6ade70423ba366077653dbb8ac43a677933c776/apps/web/src/components/T…
- https://github.com/tianma-if/edgeever/commit/6b5027e8b4becbee0c0de7cd1a3d04af78ca87ca
- https://github.com/tianma-if/edgeever/issues/533
- https://github.com/tianma-if/edgeever/issues/546
- https://www.vulncheck.com/advisories/edgeever-1.6.0-through-1.112.0-stored-xss-via-templatespane-template-pre…
- https://github.com/tianma-if/edgeever/issues/533
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.