Report

Should I Use logseq?

logseq.com·Analyzed 15 hours ago·9/19/2026·Based on 10 sources

A privacy-first, open-source platform for knowledge management and collaboration.

Depends

Depends

Great free personal knowledge base for individuals who accept beta roughness and self-serve support.

Powerful free personal knowledge base, but beta reliability, paid sync, and real CVEs make it risky for teams.

Confidence: Medium

$5/mo

Starting price

Sync add-on; core app is free

Yes

Free tier

Open-source, local-first apps

$4.1M

Funding

Raised May 2022

4

CVEs found

RCE + XSS issues, 2025–2026

Value for money

5

Free open-source core; only sync is paid

Ease of use

3

Powerful but a learning curve; beta rough edges

Feature depth

4

Database-backed outliner; built-ins rival Obsidian

Support quality

2

Small team; slow fixes, delayed roadmap

Security posture

2

RCE and XSS CVEs; unpatched claims

Pros

Free, open-source, local-first knowledge base
Database-backed queries give real structure to notes
Users say built-in features beat Obsidian's^³
Long-term users report being happy daily drivers
Desktop and mobile apps, cross-platform^⁵

Cons

Still effectively beta; reliability complaints documented^²
Multiple CVEs including remote code execution^⁶
Sync costs ~$5/mo and is beta^⁵
Past incident: sent user data to third parties
Users report graph content leaking outside its directory

Gotchas

highA June 2026 forum post claims five CVEs remain unpatched
highNot HIPAA compliant on its own; journals with patient names are risky^⁸
mediumMigration to new database version suffered delays; some users are leaving
mediumNon-standard Markdown outliner format complicates exports and migration

Best for

Solo knowledge workers
Privacy-first note takers
Outliner and journaling fans
Open-source enthusiasts

Not for

Teams needing dependable collaboration — sync is beta
Anyone handling HIPAA or regulated data
Buyers wanting polished, stable software
Security-sensitive orgs needing fast patching

Pricing

Open-source app

Free

Local-first notes on desktop/mobile
All core features
Plugins

Logseq Sync

~$5/mo

Multi-device sync
Beta product

Security

Real risk: multiple CVEs since 2025 including RCE; a 2026 forum thread claims five remain unpatched.

CVE-2026-9279: shell command injection RCEExposed IPC handler allows remote code execution in the desktop app.^⁶
CVE-2026-47900: stored XSS in plugin name fieldMalicious plugin name can execute stored scripts.
CVE-2026-47901: sandbox escapeVulnerability allows escaping the app sandbox.
CVE-2025-56683: cross-site scriptingXSS vulnerability in the Electron app.^⁷
Graph content leaks outside its directoryUser-reported security issue; content written outside the graph folder.

What users say

Fans praise the outliner power and privacy promise, but a vocal minority reports beta reliability problems and a past privacy misstep.

“Logseq is still very much in beta,”

— Logseq forum, feedback thread

“Logseq has made a fool of us privacy-conscious people.”

— Reddit, r/logseq

“Why Logseq is not popular like Obsidian?”

— Reddit, r/logseq

Alternatives

Compare logseq with each alternative.

Obsidian

Best-received local-first rival; huge plugin ecosystem.

logseq vs Obsidian

Notion

Better for team collaboration; cloud-based docs and databases.

logseq vs Notion

Tana

Structured outliner with built-in AI and database views.

NotePlan

Calendar-integrated Markdown notes, strong for Apple users.

logseq vs NotePlan

Full analysis

Based on ~45 public sources; many snippets truncated, so confidence is medium.

Sources

A Review of Logseq after using it for more than one yearreddit.com
review
Logseq is not a reliable note taking appdiscuss.logseq.com
review
Choosing between Logseq and Obsidianmarkmcelroy.com
review
I thought Logseq was too simple but ended up using it for everythingxda-developers.com
review
Logseq downloads (Sync BETA)logseq.com
official
CVE-2026-9279: Logseq Shell Command Injection RCEsentinelone.com
security
CVE-2025-56683 Detail - NVDnvd.nist.gov
security
Is Logseq HIPAA Compliant?accountablehq.com
security
Logseq raises $4.1Mblog.logseq.com
news
Logseq: pricing from €5, review & alternativestooltrim.com
review

Rate this review

Anonymous. You can change your vote.

Loading votes…

Ask a follow-up

Ask if a use case fits. Answers stay inside this report and its sources.

Comments

One queue. No replies. Give a display name first. Limit: 7 comments per day.

No comments yet.

Depends

Great free personal knowledge base for individuals who accept beta roughness and self-serve support.

Who it's for

Solo knowledge workers
Privacy-first note takers
Outliner and journaling fans
Open-source enthusiasts

Who it's not for

Teams needing dependable collaboration — sync is beta
Anyone handling HIPAA or regulated data
Buyers wanting polished, stable software
Security-sensitive orgs needing fast patching

Gotchas

A June 2026 forum post claims five CVEs remain unpatched
Not HIPAA compliant on its own; journals with patient names are risky⁸
Migration to new database version suffered delays; some users are leaving
Non-standard Markdown outliner format complicates exports and migration

Pricing notes

Open-source app: Free — Local-first notes on desktop/mobile; All core features; Plugins
Logseq Sync: ~$5/mo — Multi-device sync; Beta product

Key capabilities

$5/mo — Starting price (Sync add-on; core app is free)
Yes — Free tier (Open-source, local-first apps)
$4.1M — Funding (Raised May 2022)
4 — CVEs found (RCE + XSS issues, 2025–2026)
Value for money: 5/5. Free open-source core; only sync is paid
Ease of use: 3/5. Powerful but a learning curve; beta rough edges
Feature depth: 4/5. Database-backed outliner; built-ins rival Obsidian
Support quality: 2/5. Small team; slow fixes, delayed roadmap
Security posture: 2/5. RCE and XSS CVEs; unpatched claims

Security notes

Real risk: multiple CVEs since 2025 including RCE; a 2026 forum thread claims five remain unpatched.

CVE-2026-9279: shell command injection RCE. Exposed IPC handler allows remote code execution in the desktop app.⁶
CVE-2026-47900: stored XSS in plugin name field. Malicious plugin name can execute stored scripts.
CVE-2026-47901: sandbox escape. Vulnerability allows escaping the app sandbox.
CVE-2025-56683: cross-site scripting. XSS vulnerability in the Electron app.⁷
Graph content leaks outside its directory. User-reported security issue; content written outside the graph folder.

What to use instead

Obsidian — Best-received local-first rival; huge plugin ecosystem. https://obsidian.md
Notion — Better for team collaboration; cloud-based docs and databases. https://www.notion.so
Tana — Structured outliner with built-in AI and database views. https://tana.inc
NotePlan — Calendar-integrated Markdown notes, strong for Apple users. https://noteplan.co

Sources

1.A Review of Logseq after using it for more than one year https://www.reddit.com/r/logseq/comments/1gxc7ra/a_review_of_logseq_after_using_it_for_more_than/
2.Logseq is not a reliable note taking app https://discuss.logseq.com/t/logseq-is-not-a-reliable-note-taking-app/28770
3.Choosing between Logseq and Obsidian https://markmcelroy.com/choosing-between-logseq-and-obsidian/
4.I thought Logseq was too simple but ended up using it for everything https://www.xda-developers.com/logseq-for-everything/
5.Logseq downloads (Sync BETA) https://logseq.com/downloads
6.CVE-2026-9279: Logseq Shell Command Injection RCE https://www.sentinelone.com/vulnerability-database/cve-2026-9279/
7.CVE-2025-56683 Detail - NVD https://nvd.nist.gov/vuln/detail/CVE-2025-56683
8.Is Logseq HIPAA Compliant? https://www.accountablehq.com/post/is-logseq-hipaa-compliant-for-care-manager-daily-journals-that-include-patient-names
9.Logseq raises $4.1M https://blog.logseq.com
10.Logseq: pricing from €5, review & alternatives https://tooltrim.com