CVE-2026-40185
Missing Authorization on Immich Trip Photo Routes in TREK
Summary
Missing Authorization on Immich Trip Photo Routes in TREK
Original description
The description as published by the source.
TREK is a collaborative travel planner. Prior to 2.7.2, TREK was missing authorization checks on the Immich trip photo management routes. This vulnerability is fixed in 2.7.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com