agentprime: immichEvery new CVE for immich.https://agentprime.io/CVE-2026-77439: Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpointshttps://agentprime.io/advisories/CVE-2026-77439/https://agentprime.io/advisories/CVE-2026-77439/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:25:59 GMTCVECVE-2026-104867: Immich calendar heatmap endpoint discloses cross-user activity through broken access controlhttps://agentprime.io/advisories/CVE-2026-104867/https://agentprime.io/advisories/CVE-2026-104867/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 17:03:59 GMTCVECVE-2026-119330: Immich: A regular user can create SharedLink for album/asset belonging to another user through CreateSharedLink APIhttps://agentprime.io/advisories/CVE-2026-119330/https://agentprime.io/advisories/CVE-2026-119330/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:53:29 GMTCVECVE-2026-119329: Immich: Partner "view-only" sharing leaks GPS coordinates of the sharer's archived assets via GET /api/map/markershttps://agentprime.io/advisories/CVE-2026-119329/https://agentprime.io/advisories/CVE-2026-119329/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:51:23 GMTCVECVE-2026-119328: Immich: Unauthenticated filesystem path injection (arbitrary directory write + recursive delete) in the machine-learning servicehttps://agentprime.io/advisories/CVE-2026-119328/https://agentprime.io/advisories/CVE-2026-119328/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 19:50:02 GMTCVECVE-2026-108165: Immich through 3.3.1 Missing Authorization in Partner Sync Exposes Locked Folder Metadatahttps://agentprime.io/advisories/CVE-2026-108165/https://agentprime.io/advisories/CVE-2026-108165/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 13:55:15 GMTCVECVE-2026-105764: Immich: Authenticated SVG upload reaches ImageMagick coders and enables RCEhttps://agentprime.io/advisories/CVE-2026-105764/https://agentprime.io/advisories/CVE-2026-105764/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Oct 2026 23:07:38 GMTCVECVE-2026-103532: immich-app Immich Shared Link Preview access.ts checkSharedLinkAccess improper authorizationhttps://agentprime.io/advisories/CVE-2026-103532/https://agentprime.io/advisories/CVE-2026-103532/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 01:15:17 GMTCVECVE-2026-82272: Immich Locked Assets Remain Readable Through Albums and Shared Linkshttps://agentprime.io/advisories/CVE-2026-82272/https://agentprime.io/advisories/CVE-2026-82272/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 28 Aug 2026 16:18:54 GMTCVECVE-2026-59258: immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUserhttps://agentprime.io/advisories/CVE-2026-59258/https://agentprime.io/advisories/CVE-2026-59258/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 15 Jul 2026 17:03:57 GMTCVECVE-2026-53662: immich: One-click account takeover via XSS in login page continue redirecthttps://agentprime.io/advisories/CVE-2026-53662/https://agentprime.io/advisories/CVE-2026-53662/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 17:36:30 GMTCVEcriticalCVE-2026-40096: immich: Open Redirect via Shared Album namehttps://agentprime.io/advisories/CVE-2026-40096/https://agentprime.io/advisories/CVE-2026-40096/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 14 Apr 2026 23:54:17 GMTCVECVE-2026-35455: immich has Stored XSS via OCR Text in 360° Panorama Viewerhttps://agentprime.io/advisories/CVE-2026-35455/https://agentprime.io/advisories/CVE-2026-35455/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Apr 2026 18:31:27 GMTCVECVE-2026-25118: immich-server: Insecure Transmission of Authentication Credentials via Password Parameter in HTTP Request Query String When Accessing Shared Albumshttps://agentprime.io/advisories/CVE-2026-25118/https://agentprime.io/advisories/CVE-2026-25118/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 03 Apr 2026 15:51:07 GMTCVECVE-2026-23896: immich API Key Privilege Escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2026-23896/https://agentprime.io/advisories/CVE-2026-23896/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Jan 2026 17:12:43 GMTCVECVE-2025-43856: immich allows account hijacking through oauth2https://agentprime.io/advisories/CVE-2025-43856/https://agentprime.io/advisories/CVE-2025-43856/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 11 Jul 2025 17:10:52 GMTCVE