CVE Feed

    Dashboard / CVE / CVE-2026-82272

    CVE-2026-82272

    Immich through 3.1.0 fails to properly enforce locked asset visibility when assets are locked through the single-asset endpoint, allowing them to remain accessible through shared albums and links. Attackers can read locked assets and their metadata by accessing existing shared albums or links, bypassing the locked visibility protection.

    Published:Aug 28, 2026
    Last Modified:Aug 31, 2026
    EPS:Aug 28, 2026
    EPSS Score:0.0025
    CVSS Score:6.5

    Affected Products

    Vendor
    Immich-app
    Product
    Immich

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-863 Incorrect Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-59258 (CVSS 7.2) — immich before 3.0.3 contains a broken access control vulnerability in the PUT /albums/:id/user/:userId endpoin…
    CVE-2026-53662 (CVSS 9.6) — immich is a high performance self-hosted photo and video management solution. From commit 4ffa26c9 until 4eb10…
    CVE-2026-40096 (CVSS 5.1) — immich is a high performance self-hosted photo and video management solution. Versions prior to 2.7.3 contain …
    CVE-2026-35455 (CVSS 7.3) — immich is a high performance self-hosted photo and video management solution. Prior to 2.7.0, sStored Cross-Si…
    CVE-2026-25118 (CVSS 6.3) — immich is a high performance self-hosted photo and video management solution. Prior to version 2.6.0, the Immi…
    CVE-2026-23896 (CVSS 7.2) — immich is a high performance self-hosted photo and video management solution. Prior to version 2.5.0, API keys…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High