CVE-2026-54509

Name of the Vulnerable Software and Affected Versions TREK versions 3.0.0 through 3.0.9

Description An authentication bypass exists where the endpoint '/api/journeys/:id/share-link' calls the getJourneyShareLink() function without verifying if the requester has permission to access the journey. An authenticated user can enumerate the :id variable to retrieve tokens from journey share tokens belonging to other users. These tokens allow unauthenticated access via the '/api/public/journey/:token' endpoint to sensitive data, including entries, captions, locations, moods, gallery photos, photo paths, and asset identifiers.

Recommendations Update to version 3.1.0.