Skip to content
OpenAdvisories

Vendor

immich-app

16 known vulnerabilities.

Products

immich 16
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2026-119330

    Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink API

    Immich is a high-performance self-hosted photo and video management solution. Prior to 3.2.0, the shared-link creation API accepted albumId and assetIds as independent fields in server/src/services/shared-link.service.ts but authorized only the resource selec…

    immich-app immich