Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-103532

immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the function checkSharedLinkAccess of the file server/src/utils/access.ts of the component Shared Link Preview Handler. The manipulation of the argument Password leads to improper authorization. The attack may be initiated remotely. The reported GitHub issue was closed with the label "duplicate".

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

immich-app Immich

  • 2.7.0affected
  • 2.7.1affected
  • 2.7.2affected
  • 2.7.3affected
  • 2.7.4affected
  • 2.7.5affected

References