Skip to content
OpenAdvisories

Vendor

immich-app

16 known vulnerabilities.

Products

immich 16
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-53662

    immich: One-click account takeover via XSS in login page continue redirect

    immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 until 4eb1003, a reflected cross-site scripting (XSS) vulnerability on the /auth/login page allows an attacker to fully compromise any authenticated user's acco…

    immich-app immich