Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-40185

Missing Authorization on Immich Trip Photo Routes in TREK

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

mauriceboe TREK

  • < 2.7.2affected

References