CVE-2026-78887 | liketrek TREK up to 3.0.22 Journey Photo Proxy validateShareTokenForAsset authorization (GHSA-24×9-fcj9-vp6w)

A vulnerability, which was classified as problematic, was found in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization.

This vulnerability is tracked as CVE-2026-78887. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More