PT-2026-81297

CVE-2026-78886

Published

2026-08-25

Updated

2026-08-25

Description by

CVSS 4.0

6.3

Medium

MetricsAV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X

Name of the Vulnerable Software and Affected Versions liketrek TREK versions prior to 3.1.0

Description A path traversal flaw exists in the Public Journey Photo Proxy component within the file server/src/nest/journey/journey-public.controller.ts. This issue allows a remote attacker to perform a manipulation that results in unauthorized access to files and directories. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables such as file paths.

Recommendations Update to version 3.1.0.

Exploitability

Exploit

Fix

Impacts

Researchers

Bytejmp

Vendors

Affected products

Weakness enumeration

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')

Related identifiers