CVE-2026-77294

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.3.0

Description When the LLM PARSING feature is enabled, an authenticated user with write permission to a trip instance can store an attacker-controlled llm base url via the settings API. This value is processed by the clients in server/src/nest/llm-parse/clients/openai-compatible.client.ts, server/src/nest/llm-parse/clients/anthropic.client.ts, and server/src/nest/llm-parse/router/ollama-format.client.ts without a server-side request forgery (SSRF) guard. SSRF is a vulnerability that allows an attacker to induce the server-side application to make requests to an unintended location. Triggering the AI-assisted trip parsing causes the server to request the specified destination, potentially returning upstream error response text in parsing warnings. This can lead to internal service discovery and access to link-local cloud metadata, which may disclose infrastructure credentials and allow the modification of protected cloud resources.

Recommendations Update to version 3.3.0.