Product by Immich-app

    Immich

    14 known vulnerabilities in Immich (Immich-app), 0 of them actively exploited (CISA KEV).

    Key figures

    14

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Immich (Immich-app)
    HighCVE-2026-59258

    immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUser

    		8.3
    HighCVE-2026-105764

    Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCE

    		—
    MediumCVE-2026-119328

    Immich: Path Traversal

    		6.5
    MediumCVE-2026-103532

    immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

    		5.3
    HighCVE-2026-82272

    Immich Locked Assets Remain Readable Through Albums and Shared Links

    		6.5
    CriticalCVE-2026-53662

    immich: One-click account takeover via XSS in login page continue redirect

    		9.6
    HighCVE-2026-25118

    Immich: Use of HTTP Request With Sensitive Query String

    also in 1 other product

    		7.5
    HighCVE-2025-43856

    immich allows account hijacking through oauth2

    		—
    MediumCVE-2026-108165

    Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadata

    		4.3
    HighCVE-2026-23896

    immich API Key Privilege Escalation vulnerability

    also in 1 other product

    		7.2
    HighCVE-2026-35455

    immich has Stored XSS via OCR Text in 360° Panorama Viewer

    also in 1 other product

    		7.3
    MediumCVE-2026-119329

    Immich: Authorization Bypass Through User-Controlled Key

    		4.3
    LowCVE-2026-119330

    Immich: Improper Authorization

    		3.5
    MediumCVE-2026-40096

    immich: Open Redirect via Shared Album name

    also in 1 other product

    		5.4

    News

    All products by Immich-app