CVE-2026-40185
TREK is a collaborative travel planner.
Published Apr 10, 2026 · updated Jun 17, 2026 · mauriceboe trek
TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Apr 10, 2026 · NIST NVD
Detected
TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.
Jun 17, 2026 · NIST NVD
Updated
TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.
Affected
- cpe mauriceboe/trekversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-40185
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-40185
TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.
nvd.nist.gov