Low severity3.7NVD Advisory· Published Aug 25, 2026

CVE-2026-78886

Description

A security flaw has been discovered in liketrek TREK up to 3.0.22. This affects an unknown function of the file server/src/nest/journey/journey-public.controller.ts of the component Public Journey Photo Proxy. Performing a manipulation results in path traversal. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is reported as difficult. Upgrading to version 3.1.0 mitigates this issue. It is advisable to upgrade the affected component.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Liketrek/TREKllm-fuzzy
Range: <=3.0.22

Patches

Vulnerability mechanics

References

github.com/liketrek/TREK/releases/tag/v3.1.0nvd
github.com/mauriceboe/TREK/security/advisories/GHSA-h66w-m5g2-cqpcnvd
vuldb.com/cve/CVE-2026-78886nvd
vuldb.com/submit/886932nvd
vuldb.com/vuln/394942nvd
vuldb.com/vuln/394942/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.240
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000