shouldiuse.io

Categories

VERDICT

logseq Review

Depends

Should I use logseq?

A privacy-first, open-source platform for knowledge management and collaboration. - logseq.com

· 1 month ago

Great free personal knowledge base for individuals who accept beta roughness and self-serve support. Avoid for teams, reliability-critical work, or regulated data.

Confidence

Medium. Based on ~45 public sources; many snippets truncated, so confidence is medium.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

Free

Open-source app

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes
Logseq Sync~$5/mo

Best for

  • Solo knowledge workers
  • Privacy-first note takers
  • Outliner and journaling fans
  • Open-source enthusiasts

Not for

  • Teams needing dependable collaboration — sync is beta
  • Anyone handling HIPAA or regulated data
  • Buyers wanting polished, stable software
  • Security-sensitive orgs needing fast patching

Gotchas - check before you buy

high

A June 2026 forum post claims five CVEs remain unpatched

high

Not HIPAA compliant on its own; journals with patient names are risky

medium

Migration to new database version suffered delays; some users are leaving

medium

Non-standard Markdown outliner format complicates exports and migration

Pros and cons

Pros

  • Free, open-source, local-first knowledge base
  • Database-backed queries give real structure to notes
  • Users say built-in features beat Obsidian's
  • Long-term users report being happy daily drivers
  • Desktop and mobile apps, cross-platform

Cons

  • Still effectively beta; reliability complaints documented
  • Multiple CVEs including remote code execution
  • Sync costs ~$5/mo and is beta
  • Past incident: sent user data to third parties
  • Users report graph content leaking outside its directory

Sources & method

- 10 sources - Real risk: multiple CVEs since 2025 including RCE; a 2026 forum thread claims five remain unpatched.

official x1review x5security x3news x1
  • CVE-2026-9279: shell command injection RCE, Exposed IPC handler allows remote code execution in the desktop app.
  • CVE-2026-47900: stored XSS in plugin name field, Malicious plugin name can execute stored scripts.
  • CVE-2026-47901: sandbox escape, Vulnerability allows escaping the app sandbox.
  • CVE-2025-56683: cross-site scripting, XSS vulnerability in the Electron app.
  • Graph content leaks outside its directory, User-reported security issue; content written outside the graph folder.

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 5/5. Free open-source core; only sync is paid
  • Ease of use: 3/5. Powerful but a learning curve; beta rough edges
  • Feature depth: 4/5. Database-backed outliner; built-ins rival Obsidian
  • Support quality: 2/5. Small team; slow fixes, delayed roadmap
  • Security posture: 2/5. RCE and XSS CVEs; unpatched claims
  • $5/mo Starting price Sync add-on; core app is free
  • Yes Free tier Open-source, local-first apps
  • $4.1M Funding Raised May 2022
  • 4 CVEs found RCE + XSS issues, 2025–2026

Pricing

Open-source app

Free

  • Local-first notes on desktop/mobile
  • All core features
  • Plugins

Logseq Sync

~$5/mo

  • Multi-device sync
  • Beta product

Security

Real risk: multiple CVEs since 2025 including RCE; a 2026 forum thread claims five remain unpatched.

  • CVE-2026-9279: shell command injection RCEExposed IPC handler allows remote code execution in the desktop app.⁶
  • CVE-2026-47900: stored XSS in plugin name fieldMalicious plugin name can execute stored scripts.
  • CVE-2026-47901: sandbox escapeVulnerability allows escaping the app sandbox.
  • CVE-2025-56683: cross-site scriptingXSS vulnerability in the Electron app.⁷
  • Graph content leaks outside its directoryUser-reported security issue; content written outside the graph folder.

What users say

Fans praise the outliner power and privacy promise, but a vocal minority reports beta reliability problems and a past privacy misstep.

“Logseq is still very much in beta,”
Logseq forum, feedback thread
“Logseq has made a fool of us privacy-conscious people.”
Reddit, r/logseq
“Why Logseq is not popular like Obsidian?”
Reddit, r/logseq
Full analysis

Based on ~45 public sources; many snippets truncated, so confidence is medium.

Powerful free personal knowledge base, but beta reliability, paid sync, and real CVEs make it risky for teams.

Methodology

Based on ~45 public sources; many snippets truncated, so confidence is medium.

Read how a report is made.

Sources

  1. A Review of Logseq after using it for more than one yearreddit.com
    review
  2. Logseq is not a reliable note taking appdiscuss.logseq.com
    review
  3. Choosing between Logseq and Obsidianmarkmcelroy.com
    review
  4. I thought Logseq was too simple but ended up using it for everythingxda-developers.com
    review
  5. Logseq downloads (Sync BETA)logseq.com
    official
  6. CVE-2026-9279: Logseq Shell Command Injection RCEsentinelone.com
    security
  7. CVE-2025-56683 Detail - NVDnvd.nist.gov
    security
  8. Is Logseq HIPAA Compliant?accountablehq.com
    security
  9. Logseq raises $4.1Mblog.logseq.com
    news
  10. Logseq: pricing from €5, review & alternativestooltrim.com
    review

Add this review to your site

This check for logseq says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends logseq Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.