{"schema_version":"2","view":"grouped","data":[{"id":8746,"cve_ids":["CVE-2026-77321"],"payload":{"kind":"advisory","title":"TREK MCP trip summary bypasses delegated OAuth read scopes","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips:read and returns core trip summary data regardless of the delegated scopes. A token granted only an unrelated capability, such as weather:read, can receive trip metadata, member email addresses from server/src/services/tripService.ts, itinerary days, and accommodations for every trip accessible to the token's user. Cross-user trip authorization remains enforced, but the missing scope check defeats the consented least-privilege boundary and exposes trip content and third-party contact information to an MCP client that was not authorized to read it. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77321","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77321","aliases":["CVE-2026-77321"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-10-05T15:32:36.028Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-qvw8-w937-vcmq","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77321","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:47:04.222887Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:32:36.028Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:04:05.947Z"}}},"related_cves":[{"value":"CVE-2026-77321","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2faebb53-645e-4741-90e5-2f2fdc6db3e8","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77321","advisory_id":"2faebb53-645e-4741-90e5-2f2fdc6db3e8","event_types":["advisory"],"published_at":"2026-10-24T23:05:38.303403+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:04:05.947+00:00","detail_url":"/advisories/advisory%3A2faebb53-645e-4741-90e5-2f2fdc6db3e8","group":{"id":"advisory:2faebb53-645e-4741-90e5-2f2fdc6db3e8","revision":1,"primary_event_id":8734,"change":"published","superseded_by":[],"changed":{"id":8734,"cve_ids":["CVE-2026-77321"],"payload":{"kind":"advisory","title":"TREK MCP trip summary bypasses delegated OAuth read scopes","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips:read and returns core trip summary data regardless of the delegated scopes. A token granted only an unrelated capability, such as weather:read, can receive trip metadata, member email addresses from server/src/services/tripService.ts, itinerary days, and accommodations for every trip accessible to the token's user. Cross-user trip authorization remains enforced, but the missing scope check defeats the consented least-privilege boundary and exposes trip content and third-party contact information to an MCP client that was not authorized to read it. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77321","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77321","aliases":["CVE-2026-77321"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-10-05T15:32:36.028Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-qvw8-w937-vcmq","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77321","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:47:04.222887Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:32:36.028Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:04:05.947Z"}}},"related_cves":[{"value":"CVE-2026-77321","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2faebb53-645e-4741-90e5-2f2fdc6db3e8","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77321","advisory_id":"2faebb53-645e-4741-90e5-2f2fdc6db3e8","event_types":["advisory"],"published_at":"2026-10-24T23:05:38.303403+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:04:05.947+00:00","detail_url":"/events/8734"},"members":[{"id":8734,"cve_ids":["CVE-2026-77321"],"payload":{"kind":"advisory","title":"TREK MCP trip summary bypasses delegated OAuth read scopes","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, the get_trip_summary tool in server/src/mcp/tools/trips.ts is registered for scoped OAuth MCP tokens without requiring trips:read and returns core trip summary data regardless of the delegated scopes. A token granted only an unrelated capability, such as weather:read, can receive trip metadata, member email addresses from server/src/services/tripService.ts, itinerary days, and accommodations for every trip accessible to the token's user. Cross-user trip authorization remains enforced, but the missing scope check defeats the consented least-privilege boundary and exposes trip content and third-party contact information to an MCP client that was not authorized to read it. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77321","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77321","aliases":["CVE-2026-77321"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-10-05T15:32:36.028Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-qvw8-w937-vcmq","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77321","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-10-05T14:47:04.222887Z"}}}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-10-05T15:32:36.028Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:04:05.947Z"}}},"related_cves":[{"value":"CVE-2026-77321","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:2faebb53-645e-4741-90e5-2f2fdc6db3e8","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77321","advisory_id":"2faebb53-645e-4741-90e5-2f2fdc6db3e8","event_types":["advisory"],"published_at":"2026-10-24T23:05:38.303403+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:04:05.947+00:00","detail_url":"/events/8734"}]}},{"id":3379,"cve_ids":["CVE-2026-77320"],"payload":{"kind":"advisory","title":"TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes, and places through GET /api/shared/:token even when the trip owner disables share_map. The client hides the map, but the public JSON response still includes the itinerary and place names, coordinates, addresses, descriptions, notes, and prices. Anyone holding the valid share token can therefore read location and route information that the owner explicitly chose not to share, although the random token remains required and the flaw does not permit modification. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77320","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77320","aliases":["CVE-2026-77320"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-29T03:05:34.796Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-9hc8-p7gm-p7mx","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77320","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T03:05:11.522637Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-9hc8-p7gm-p7mx","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:05:34.796Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:05:13.791Z"}}},"related_cves":[{"value":"CVE-2026-77320","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:53222870-0428-4294-abac-cf56f2fe3cff","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77320","advisory_id":"53222870-0428-4294-abac-cf56f2fe3cff","event_types":["advisory"],"published_at":"2026-10-24T21:34:18.823105+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:05:13.791+00:00","detail_url":"/advisories/advisory%3A53222870-0428-4294-abac-cf56f2fe3cff","group":{"id":"advisory:53222870-0428-4294-abac-cf56f2fe3cff","revision":1,"primary_event_id":3396,"change":"published","superseded_by":[],"changed":{"id":3396,"cve_ids":["CVE-2026-77320"],"payload":{"kind":"advisory","title":"TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes, and places through GET /api/shared/:token even when the trip owner disables share_map. The client hides the map, but the public JSON response still includes the itinerary and place names, coordinates, addresses, descriptions, notes, and prices. Anyone holding the valid share token can therefore read location and route information that the owner explicitly chose not to share, although the random token remains required and the flaw does not permit modification. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77320","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77320","aliases":["CVE-2026-77320"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-29T03:05:34.796Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-9hc8-p7gm-p7mx","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77320","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T03:05:11.522637Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-9hc8-p7gm-p7mx","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:05:34.796Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:05:13.791Z"}}},"related_cves":[{"value":"CVE-2026-77320","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:53222870-0428-4294-abac-cf56f2fe3cff","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77320","advisory_id":"53222870-0428-4294-abac-cf56f2fe3cff","event_types":["advisory"],"published_at":"2026-10-24T21:34:18.823105+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:05:13.791+00:00","detail_url":"/events/3396"},"members":[{"id":3396,"cve_ids":["CVE-2026-77320"],"payload":{"kind":"advisory","title":"TREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, getSharedTripData in server/src/services/shareService.ts returns days, assignments, dayNotes, and places through GET /api/shared/:token even when the trip owner disables share_map. The client hides the map, but the public JSON response still includes the itinerary and place names, coordinates, addresses, descriptions, notes, and prices. Anyone holding the valid share token can therefore read location and route information that the owner explicitly chose not to share, although the random token remains required and the flaw does not permit modification. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77320","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-77320","aliases":["CVE-2026-77320"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"LOW"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-29T03:05:34.796Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-9hc8-p7gm-p7mx","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77320","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-29T03:05:11.522637Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-9hc8-p7gm-p7mx","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T03:05:34.796Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:05:13.791Z"}}},"related_cves":[{"value":"CVE-2026-77320","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:53222870-0428-4294-abac-cf56f2fe3cff","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77320","advisory_id":"53222870-0428-4294-abac-cf56f2fe3cff","event_types":["advisory"],"published_at":"2026-10-24T21:34:18.823105+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:05:13.791+00:00","detail_url":"/events/3396"}]}},{"id":3140,"cve_ids":["CVE-2026-85738"],"payload":{"kind":"advisory","title":"TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)","summary":"TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recognize NAT64, 6to4, or Teredo IPv6 transition addresses that encode an IPv4 destination. An authenticated user who controls a DNS record can supply a URL whose AAAA result is a transition address embedding a private, loopback, or link-local IPv4 target, and isAlwaysBlocked and isPrivateNetwork classify the address as allowed. In a deployment that routes the applicable transition format, user-facing imports, webhooks, integrations, or plugin egress can reach internal services or cloud metadata and expose returned information. This issue is fixed in version 3.4.0.","evidence":"cve:CVE-2026-85738","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-85738","aliases":["CVE-2026-85738"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"liketrek","product":"TREK","versions":[{"status":"affected","version":"< 3.4.0"}]}],"modified":"2026-09-28T14:51:56.222Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-9hpq-mrpx-mcxg","https://github.com/liketrek/TREK/pull/1540","https://github.com/liketrek/TREK/commit/a2bd9be184a94997105ce190dad920c41e7b10df","https://github.com/liketrek/TREK/releases/tag/v3.4.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85738","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:51:50.053724Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-9hpq-mrpx-mcxg","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T14:51:56.222Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:09:31.268Z"}}},"related_cves":[{"value":"CVE-2026-85738","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85738","advisory_id":"3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","event_types":["advisory"],"published_at":"2026-10-24T21:30:44.477537+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:09:31.268+00:00","detail_url":"/advisories/advisory%3A3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","group":{"id":"advisory:3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","revision":1,"primary_event_id":3150,"change":"published","superseded_by":[],"changed":{"id":3150,"cve_ids":["CVE-2026-85738"],"payload":{"kind":"advisory","title":"TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)","summary":"TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recognize NAT64, 6to4, or Teredo IPv6 transition addresses that encode an IPv4 destination. An authenticated user who controls a DNS record can supply a URL whose AAAA result is a transition address embedding a private, loopback, or link-local IPv4 target, and isAlwaysBlocked and isPrivateNetwork classify the address as allowed. In a deployment that routes the applicable transition format, user-facing imports, webhooks, integrations, or plugin egress can reach internal services or cloud metadata and expose returned information. This issue is fixed in version 3.4.0.","evidence":"cve:CVE-2026-85738","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-85738","aliases":["CVE-2026-85738"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"liketrek","product":"TREK","versions":[{"status":"affected","version":"< 3.4.0"}]}],"modified":"2026-09-28T14:51:56.222Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-9hpq-mrpx-mcxg","https://github.com/liketrek/TREK/pull/1540","https://github.com/liketrek/TREK/commit/a2bd9be184a94997105ce190dad920c41e7b10df","https://github.com/liketrek/TREK/releases/tag/v3.4.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85738","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:51:50.053724Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-9hpq-mrpx-mcxg","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T14:51:56.222Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:09:31.268Z"}}},"related_cves":[{"value":"CVE-2026-85738","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85738","advisory_id":"3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","event_types":["advisory"],"published_at":"2026-10-24T21:30:44.477537+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:09:31.268+00:00","detail_url":"/events/3150"},"members":[{"id":3150,"cve_ids":["CVE-2026-85738"],"payload":{"kind":"advisory","title":"TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)","summary":"TREK is a collaborative travel planner. Prior to 3.4.0, the checkSsrf logic in server/src/utils/ssrfGuard.ts does not recognize NAT64, 6to4, or Teredo IPv6 transition addresses that encode an IPv4 destination. An authenticated user who controls a DNS record can supply a URL whose AAAA result is a transition address embedding a private, loopback, or link-local IPv4 target, and isAlwaysBlocked and isPrivateNetwork classify the address as allowed. In a deployment that routes the applicable transition format, user-facing imports, webhooks, integrations, or plugin egress can reach internal services or cloud metadata and expose returned information. This issue is fixed in version 3.4.0.","evidence":"cve:CVE-2026-85738","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"medium","structured":{"id":"CVE-2026-85738","aliases":["CVE-2026-85738"],"metrics":[{"cvssV3_1":{"scope":"CHANGED","version":"3.1","baseScore":6.3,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"HIGH","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"liketrek","product":"TREK","versions":[{"status":"affected","version":"< 3.4.0"}]}],"modified":"2026-09-28T14:51:56.222Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-9hpq-mrpx-mcxg","https://github.com/liketrek/TREK/pull/1540","https://github.com/liketrek/TREK/commit/a2bd9be184a94997105ce190dad920c41e7b10df","https://github.com/liketrek/TREK/releases/tag/v3.4.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-85738","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-28T14:51:50.053724Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-9hpq-mrpx-mcxg","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-28T14:51:56.222Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:09:31.268Z"}}},"related_cves":[{"value":"CVE-2026-85738","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","priority":{"reasons":[],"severity":"medium","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"medium"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-85738","advisory_id":"3b823d01-9ff4-4cf4-a5e5-da980eabfc7a","event_types":["advisory"],"published_at":"2026-10-24T21:30:44.477537+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:09:31.268+00:00","detail_url":"/events/3150"}]}},{"id":1857,"cve_ids":["CVE-2026-77293"],"payload":{"kind":"advisory","title":"TREK: Cross-user note-file deletion (IDOR / Broken Access Control)","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and file identifiers without requiring the file to belong to that trip. A user with edit access to any trip can submit identifiers belonging to another user's trip and permanently delete that note-file attachment. Sequential identifiers make broad targeting practical, while attachment read operations remain trip-scoped and are not affected. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77293","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77293","aliases":["CVE-2026-77293"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-24T18:45:45.240Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-cjc5-722j-vvmf","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77293","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T18:44:45.227942Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-cjc5-722j-vvmf","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T18:45:45.240Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:08:30.599Z"}}},"related_cves":[{"value":"CVE-2026-77293","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e3597cf3-f721-469e-aea7-38776935a971","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77293","advisory_id":"e3597cf3-f721-469e-aea7-38776935a971","event_types":["advisory"],"published_at":"2026-10-24T21:08:32.731022+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:08:30.599+00:00","detail_url":"/advisories/advisory%3Ae3597cf3-f721-469e-aea7-38776935a971","group":{"id":"advisory:e3597cf3-f721-469e-aea7-38776935a971","revision":1,"primary_event_id":1854,"change":"published","superseded_by":[],"changed":{"id":1854,"cve_ids":["CVE-2026-77293"],"payload":{"kind":"advisory","title":"TREK: Cross-user note-file deletion (IDOR / Broken Access Control)","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and file identifiers without requiring the file to belong to that trip. A user with edit access to any trip can submit identifiers belonging to another user's trip and permanently delete that note-file attachment. Sequential identifiers make broad targeting practical, while attachment read operations remain trip-scoped and are not affected. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77293","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77293","aliases":["CVE-2026-77293"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-24T18:45:45.240Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-cjc5-722j-vvmf","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77293","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T18:44:45.227942Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-cjc5-722j-vvmf","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T18:45:45.240Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:08:30.599Z"}}},"related_cves":[{"value":"CVE-2026-77293","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e3597cf3-f721-469e-aea7-38776935a971","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77293","advisory_id":"e3597cf3-f721-469e-aea7-38776935a971","event_types":["advisory"],"published_at":"2026-10-24T21:08:32.731022+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:08:30.599+00:00","detail_url":"/events/1854"},"members":[{"id":1854,"cve_ids":["CVE-2026-77293"],"payload":{"kind":"advisory","title":"TREK: Cross-user note-file deletion (IDOR / Broken Access Control)","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and file identifiers without requiring the file to belong to that trip. A user with edit access to any trip can submit identifiers belonging to another user's trip and permanently delete that note-file attachment. Sequential identifiers make broad targeting practical, while attachment read operations remain trip-scoped and are not affected. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77293","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77293","aliases":["CVE-2026-77293"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":7.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"LOW","privilegesRequired":"LOW","confidentialityImpact":"NONE"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-24T18:45:45.240Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-cjc5-722j-vvmf","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77293","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2026-09-24T18:44:45.227942Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-cjc5-722j-vvmf","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T18:45:45.240Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:08:30.599Z"}}},"related_cves":[{"value":"CVE-2026-77293","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:e3597cf3-f721-469e-aea7-38776935a971","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77293","advisory_id":"e3597cf3-f721-469e-aea7-38776935a971","event_types":["advisory"],"published_at":"2026-10-24T21:08:32.731022+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:08:30.599+00:00","detail_url":"/events/1854"}]}},{"id":1854,"cve_ids":["CVE-2026-77294"],"payload":{"kind":"advisory","title":"TREK: Server-Side Request Forgery via User-Configurable LLM Base URL","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm_base_url through the settings API when the LLM_PARSING feature is enabled. Write permission to the target trip instance is required to trigger the vulnerable AI-assisted import path. The value is consumed by the clients in server/src/nest/llm-parse/clients/openai-compatible.client.ts, server/src/nest/llm-parse/clients/anthropic.client.ts, and server/src/nest/llm-parse/router/ollama-format.client.ts without applying the server-side request forgery guard. Triggering AI-assisted trip parsing causes the server to request the supplied destination, and upstream error response text can be returned in parsing warnings. This permits internal service discovery and access to link-local cloud metadata, with possible disclosure of infrastructure credentials and subsequent modification of protected cloud resources. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77294","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77294","aliases":["CVE-2026-77294"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-24T18:35:42.537Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-fmq9-ggh3-647p","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77294","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-24T18:35:19.739164Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-fmq9-ggh3-647p","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T18:35:42.537Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:04:02.393Z"}}},"related_cves":[{"value":"CVE-2026-77294","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aca1f2bc-2aa9-4b60-a063-4770f377c4bf","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77294","advisory_id":"aca1f2bc-2aa9-4b60-a063-4770f377c4bf","event_types":["advisory"],"published_at":"2026-10-24T21:08:30.955145+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:04:02.393+00:00","detail_url":"/advisories/advisory%3Aaca1f2bc-2aa9-4b60-a063-4770f377c4bf","group":{"id":"advisory:aca1f2bc-2aa9-4b60-a063-4770f377c4bf","revision":1,"primary_event_id":1851,"change":"published","superseded_by":[],"changed":{"id":1851,"cve_ids":["CVE-2026-77294"],"payload":{"kind":"advisory","title":"TREK: Server-Side Request Forgery via User-Configurable LLM Base URL","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm_base_url through the settings API when the LLM_PARSING feature is enabled. Write permission to the target trip instance is required to trigger the vulnerable AI-assisted import path. The value is consumed by the clients in server/src/nest/llm-parse/clients/openai-compatible.client.ts, server/src/nest/llm-parse/clients/anthropic.client.ts, and server/src/nest/llm-parse/router/ollama-format.client.ts without applying the server-side request forgery guard. Triggering AI-assisted trip parsing causes the server to request the supplied destination, and upstream error response text can be returned in parsing warnings. This permits internal service discovery and access to link-local cloud metadata, with possible disclosure of infrastructure credentials and subsequent modification of protected cloud resources. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77294","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77294","aliases":["CVE-2026-77294"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-24T18:35:42.537Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-fmq9-ggh3-647p","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77294","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-24T18:35:19.739164Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-fmq9-ggh3-647p","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T18:35:42.537Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:04:02.393Z"}}},"related_cves":[{"value":"CVE-2026-77294","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aca1f2bc-2aa9-4b60-a063-4770f377c4bf","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77294","advisory_id":"aca1f2bc-2aa9-4b60-a063-4770f377c4bf","event_types":["advisory"],"published_at":"2026-10-24T21:08:30.955145+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:04:02.393+00:00","detail_url":"/events/1851"},"members":[{"id":1851,"cve_ids":["CVE-2026-77294"],"payload":{"kind":"advisory","title":"TREK: Server-Side Request Forgery via User-Configurable LLM Base URL","summary":"TREK is a collaborative travel planner. Prior to 3.3.0, TREK allows an authenticated user to store an attacker-controlled llm_base_url through the settings API when the LLM_PARSING feature is enabled. Write permission to the target trip instance is required to trigger the vulnerable AI-assisted import path. The value is consumed by the clients in server/src/nest/llm-parse/clients/openai-compatible.client.ts, server/src/nest/llm-parse/clients/anthropic.client.ts, and server/src/nest/llm-parse/router/ollama-format.client.ts without applying the server-side request forgery guard. Triggering AI-assisted trip parsing causes the server to request the supplied destination, and upstream error response text can be returned in parsing warnings. This permits internal service discovery and access to link-local cloud metadata, with possible disclosure of infrastructure credentials and subsequent modification of protected cloud resources. This issue is fixed in version 3.3.0.","evidence":"cve:CVE-2026-77294","products":[{"name":{"value":"TREK","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","structured":{"id":"CVE-2026-77294","aliases":["CVE-2026-77294"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":8.1,"attackVector":"NETWORK","baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"mauriceboe","product":"TREK","versions":[{"status":"affected","version":"< 3.3.0"}]}],"modified":"2026-09-24T18:35:42.537Z","provider":"cve","references":["https://github.com/liketrek/TREK/security/advisories/GHSA-fmq9-ggh3-647p","https://github.com/liketrek/TREK/pull/1520","https://github.com/liketrek/TREK/commit/19064b39176660f3be3a2df198c87949504046e2","https://github.com/liketrek/TREK/releases/tag/v3.3.0"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-77294","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-24T18:35:19.739164Z"}}}],"references":[{"url":"https://github.com/liketrek/TREK/security/advisories/GHSA-fmq9-ggh3-647p","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-24T18:35:42.537Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-24T18:04:02.393Z"}}},"related_cves":[{"value":"CVE-2026-77294","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"},"group_id":"advisory:aca1f2bc-2aa9-4b60-a063-4770f377c4bf","priority":{"reasons":["publisher_severity"],"severity":"high","linked_cves":[],"fix_available":false,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-77294","advisory_id":"aca1f2bc-2aa9-4b60-a063-4770f377c4bf","event_types":["advisory"],"published_at":"2026-10-24T21:08:30.955145+00:00","technologies":["core-cve","trek"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-09-24T18:04:02.393+00:00","detail_url":"/events/1851"}]}}],"next_after":8746,"next_before":1854}