CVE-2026-54509 | mauriceboe TREK up to 3.0.x Journey Share journeyShareService.ts getJourneyShareLink access control

August 21, 2026 Yanac

A vulnerability classified as problematic was found in mauriceboe TREK up to 3.0.x. Affected by this issue is the function getJourneyShareLink of the file server/src/services/journeyShareService.ts of the component Journey Share. Executing a manipulation can lead to improper access controls.

This vulnerability appears as CVE-2026-54509. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More