Skip to content
OpenAdvisories

Vendor

photoprism

1 known vulnerabilities.

Products

photoprism 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-57945

    PhotoPrism - Unauthorized User Profile Modification via PUT /api/v1/users/{uid} Endpoint

    PhotoPrism before 260601-a7d098548 contains a broken access control vulnerability that allows authenticated non-admin users to modify other users' profile information by sending requests to arbitrary user endpoints. Attackers can exploit the missing session-t…

    photoprism photoprism