Skip to main content

liketrek TREK EUVDEUVD-2026-65474

| CVE-2026-78886 MEDIUM
Path Traversal (CWE-22)
2026-08-25 VulDB GHSA-pw55-389h-h6rh
Path Traversal Trek
6.3
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
6.3 MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
3.7 LOW

Network-reachable public endpoint with no authentication (AV:N, PR:N) but high exploitation complexity (AC:H); only limited file read is achievable (C:L) with no integrity or availability impact.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Source Code Evidence Fetched
Aug 25, 2026 - 13:01 vuln.today
Analysis Generated
Aug 25, 2026 - 13:01 vuln.today

DescriptionCVE.org

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. Upgrading to version 3.1.0 mitigates this issue. It is advisable to upgrade the affected component.

AnalysisAI

Path traversal in the liketrek TREK Public Journey Photo Proxy controller allows remote attackers - without authentication - to read files outside the intended directory on self-hosted instances running version 3.0.22 or earlier. The affected endpoint (server/src/nest/journey/journey-public.controller.ts) fails to adequately sanitize path inputs, exposing server-side files to limited confidentiality disclosure. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify exposed TREK 3.0.x instance
Delivery
Target unauthenticated Public Journey Photo Proxy endpoint
Exploit
Craft traversal-encoded path payload
Execution
Bypass partial path sanitization logic
Impact
Read arbitrary files accessible to server process
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The target must be running liketrek TREK version 3.0.22 or earlier with the instance network-accessible to the attacker. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 score of 6.3 with AV:N/AC:H/PR:N/UI:N reflects a remotely reachable, unauthenticated attack surface paired with high exploitation complexity - meaning this is not a trivially weaponizable flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An unauthenticated remote attacker sends a crafted HTTP GET request to the TREK Public Journey Photo Proxy endpoint, embedding path traversal sequences (e.g., `../../.env` or URL-encoded equivalents) in the filename or path parameter. If the server's partial validation is bypassed through encoding tricks or specific path structures, the server returns the contents of files outside the media directory - potentially including the application's `.env` file containing database credentials or API keys. …
Remediation The primary remediation is to upgrade liketrek TREK to version 3.1.0, the vendor-released patch available at https://github.com/liketrek/TREK/releases/tag/v3.1.0. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Trek

View all
CVE-2026-40185 HIGH
7.1 Apr 10

Authentication bypass in TREK collaborative travel planner (versions prior to 2.7.2) allows authenticated attackers with
CVE-2026-54509 MEDIUM
6.5 Aug 20

Share-link token theft in TREK versions 3.0.0 through 3.0.x allows any ordinary authenticated user to exfiltrate private
CVE-2026-78885 MEDIUM
6.3 Aug 25

Improper authentication in liketrek TREK up to version 3.0.22 allows a remote unauthenticated attacker to bypass the OID
CVE-2026-78887 MEDIUM
6.3 Aug 25

Incorrect authorization in liketrek TREK's Journey Photo Proxy (all versions through 3.0.22) enables remote unauthentica
CVE-2026-54508 MEDIUM
5.3 Aug 20

Server-Side Request Forgery in TREK, a collaborative travel planner, allows any authenticated user to pivot the server i
CVE-2026-78863 MEDIUM
5.3 Aug 25

Authentication bypass in liketrek TREK up to v3.0.22 allows a remote attacker with valid credentials to circumvent two-f
CVE-2026-78864 MEDIUM
5.3 Aug 25

SQL injection in liketrek TREK's Journey Entry Update endpoint allows authenticated remote attackers to manipulate under
CVE-2026-62945 MEDIUM
4.3 Aug 20

Insecure direct object reference in TREK collaborative travel planner before 3.1.3 allows any authenticated user with fi
CVE-2026-40184 LOW
3.7 Apr 10

TREK collaborative travel planner versions before 2.7.2 serve uploaded user photos without authentication, allowing unau
CVE-2026-54505 LOW
2.0 Aug 20

Stored HTML injection in TREK collaborative travel planner (versions prior to 3.1.0) enables content spoofing and UI red

Same weakness CWE-22 – Path Traversal

View all
CVE-2019-3396 CRITICAL POC
9.8
CVE-2019-19781 CRITICAL POC
9.8
CVE-2020-5902 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2019-11510 CRITICAL POC
10.0
CVE-2022-37042 CRITICAL POC
9.8

Same technique Path Traversal

View all
CVE-2019-19781 CRITICAL POC
9.8
CVE-2021-21972 CRITICAL POC
9.8
CVE-2021-40444 HIGH POC
8.8
CVE-2021-27065 HIGH POC
7.8
CVE-2018-20250 HIGH POC
7.8
CVE-2022-37042 CRITICAL POC
9.8
CVE-2025-64446 CRITICAL POC
9.8
CVE-2022-30333 HIGH POC
7.5

Share

EUVD-2026-65474 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy