What is CVE-2026-78887?

CVE-2026-78887 is a low-severity vulnerability in Liketrek Trek, classified under Improper Authorization. CVSS score: 3.7/10. Published 2026-08-25.

How severe is CVE-2026-78887?

Low severity. CVSS v3 base score is 3.7 out of 10.

Auth bypass in Liketrek Trek

CVE-2026-78887

A weakness has been identified in liketrek TREK up to 3.0.22. This impacts the function validateShareTokenForAsset of the component Journey Photo Proxy. Executing a manipulation can lead to incorrect authorization. The attack can be launched remotely. This attack is characterized by high complexity. The exploitability is said to be difficult. Upgrading to version 3.1.0 will fix this issue. You should upgrade the affected component.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Liketrek Trek — versions 3.0.0, 3.0.1, 3.0.10

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (related)
cna@vuldb.com (patch)

Frequently asked questions

What is CVE-2026-78887?: CVE-2026-78887 is a low-severity vulnerability in Liketrek Trek, classified under Improper Authorization. CVSS score: 3.7/10. Published 2026-08-25.
How severe is CVE-2026-78887?: Low severity. CVSS v3 base score is 3.7 out of 10.