MEDIUM 6.3 NVD
CVE-2026-78885
A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.
A vulnerability was identified in liketrek TREK up to 3.0.22. The impacted element is the function findOrCreateUser of the file server/src/services/oidcService.ts of the component OIDC Service. Such manipulation leads to improper authentication. It is possible to launch the attack remotely. The attack requires a high level of complexity. The exploitability is regarded as difficult. Upgrading to version 3.1.0 is sufficient to resolve this issue. Upgrading the affected component is advised.
References
- https://github.com/liketrek/TREK/releases/tag/v3.1.0
- https://github.com/mauriceboe/TREK/security/advisories/GHSA-fvgw-r58q-4cw4
- https://vuldb.com/cve/CVE-2026-78885
- https://vuldb.com/submit/886931
- https://vuldb.com/vuln/394941
This medium severity vulnerability with a CVSS score of 6.3 was published on 2026-08-25 via NVD.
vulnfeed aggregates 11954 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.