Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-78863

liketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability was found in liketrek TREK up to 3.0.22. Impacted is the function loginUser of the file server/src/services/authService.ts of the component Pre-2FA mfa_token Handler. The manipulation results in improper authentication. The attack may be performed from remote. Upgrading to version 3.1.0 is recommended to address this issue. Upgrading the affected component is recommended.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

liketrek TREK

  • 3.0.0affected
  • 3.0.1affected
  • 3.0.2affected
  • 3.0.3affected
  • 3.0.4affected
  • 3.0.5affected
  • 3.0.6affected
  • 3.0.7affected
  • 3.0.8affected
  • 3.0.9affected
  • 3.0.10affected
  • 3.0.11affected
  • 3.0.12affected
  • 3.0.13affected
  • 3.0.14affected
  • 3.0.15affected
  • 3.0.16affected
  • 3.0.17affected
  • 3.0.18affected
  • 3.0.19affected
  • 3.0.20affected
  • 3.0.21affected
  • 3.0.22affected
  • 3.1.0unaffected

References