Skip to main content

liketrek TREK EUVDEUVD-2026-65475

| CVE-2026-78887 MEDIUM
Incorrect Authorization (CWE-863)
2026-08-25 VulDB GHSA-j7mw-g2xq-7xfh
Authentication Bypass Trek
6.3
CVSS 4.0 · Vendor: VulDB
Share

Severity by source

Vendor (VulDB) PRIMARY
6.3 MEDIUM
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
3.7 LOW

Network-accessible proxy endpoint requires no credentials but high complexity to exploit; impact is limited to partial confidentiality of journey photos with no integrity, availability, or scope change.

3.1 AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (VulDB).

CVSS VectorVendor: VulDB

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Source Code Evidence Fetched
Aug 25, 2026 - 13:21 vuln.today
Analysis Generated
Aug 25, 2026 - 13:21 vuln.today

DescriptionCVE.org

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is said to be difficult. Upgrading to version 3.1.0 will fix this issue. You should upgrade the affected component.

AnalysisAI

Incorrect authorization in liketrek TREK's Journey Photo Proxy (all versions through 3.0.22) enables remote unauthenticated attackers to bypass share token validation in the validateShareTokenForAsset function, potentially exposing journey photos without a valid share token. The CVSS 4.0 score of 6.3 reflects high attack complexity that constrains practical exploitation despite requiring no authentication or user interaction. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Identify accessible TREK Photo Proxy endpoint
Exploit
Craft request with manipulated share token
Execution
Bypass validateShareTokenForAsset authorization logic
Impact
Retrieve unauthorized journey photo assets
Sign in to reveal

Vulnerability AssessmentAI

Exploitation The vulnerable `validateShareTokenForAsset` function must be reachable via the Journey Photo Proxy endpoint, which requires that the TREK instance is network-accessible and that journey photo sharing functionality is in use (i.e., journeys with photos exist on the instance). … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The CVSS 4.0 vector (AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N, score 6.3) places this firmly in the medium range. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who knows or can guess a valid journey photo proxy URL sends a crafted HTTP request to the Journey Photo Proxy endpoint with a manipulated or absent share token. By exploiting the flawed token-validation logic in `validateShareTokenForAsset`, the attacker bypasses the authorization check and receives the proxied journey photo in the response. …
Remediation Upgrade to TREK v3.1.0, available at https://github.com/liketrek/TREK/releases/tag/v3.1.0; the vendor explicitly states this release fixes the authorization bypass and strongly recommends updating every self-hosted instance. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Trek

View all
CVE-2026-40185 HIGH
7.1 Apr 10

Authentication bypass in TREK collaborative travel planner (versions prior to 2.7.2) allows authenticated attackers with
CVE-2026-54509 MEDIUM
6.5 Aug 20

Share-link token theft in TREK versions 3.0.0 through 3.0.x allows any ordinary authenticated user to exfiltrate private
CVE-2026-78886 MEDIUM
6.3 Aug 25

Path traversal in the liketrek TREK Public Journey Photo Proxy controller allows remote attackers - without authenticati
CVE-2026-78885 MEDIUM
6.3 Aug 25

Improper authentication in liketrek TREK up to version 3.0.22 allows a remote unauthenticated attacker to bypass the OID
CVE-2026-54508 MEDIUM
5.3 Aug 20

Server-Side Request Forgery in TREK, a collaborative travel planner, allows any authenticated user to pivot the server i
CVE-2026-78863 MEDIUM
5.3 Aug 25

Authentication bypass in liketrek TREK up to v3.0.22 allows a remote attacker with valid credentials to circumvent two-f
CVE-2026-78864 MEDIUM
5.3 Aug 25

SQL injection in liketrek TREK's Journey Entry Update endpoint allows authenticated remote attackers to manipulate under
CVE-2026-62945 MEDIUM
4.3 Aug 20

Insecure direct object reference in TREK collaborative travel planner before 3.1.3 allows any authenticated user with fi
CVE-2026-40184 LOW
3.7 Apr 10

TREK collaborative travel planner versions before 2.7.2 serve uploaded user photos without authentication, allowing unau
CVE-2026-54505 LOW
2.0 Aug 20

Stored HTML injection in TREK collaborative travel planner (versions prior to 3.1.0) enables content spoofing and UI red

Same weakness CWE-863 – Incorrect Authorization

View all
CVE-2025-54253 CRITICAL POC
10.0
CVE-2025-24200 MEDIUM
6.1
CVE-2023-21715 HIGH
7.3
CVE-2025-21480 HIGH
8.6
CVE-2025-21479 HIGH
8.6
CVE-2025-32462 HIGH POC
8.8
CVE-2017-4915 HIGH POC
7.8
CVE-2024-6782 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

EUVD-2026-65475 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy