{"data":{"id":"79c440c9-dd33-40ba-8031-17d5179c6196","title":"CVE-2026-119328: Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthenticated…","summary":"Immich, a self-hosted photo and video manager, has an unauthenticated machine-learning /predict endpoint in machine-learning/immich_ml/main.py that passes caller-supplied options into model construction without restricting security-sensitive parameters. An attacker with network access could set cache_dir to an arbitrary writable path, causing model downloads to write there and clear_cache() to call shutil.rmtree() on that path after certain model-loading failures, which may modify mounted data or recursively delete an attacker-selected directory. The model-name allowlist prevents arbitrary-model deserialization or code execution.","solution":"Fixed in version 3.3.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-119328","publishedAt":"2026-10-30T20:17:06.627Z","cveId":"CVE-2026-119328","cweIds":["CWE-22","CWE-73"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Immich"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Immich unauthenticated /predict endpoint allows arbitrary cache deletion","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"epssCheckedAt":"2026-10-31T00:10:22.044Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-31T00:10:25.181Z","patchAvailable":null,"disclosureDate":"2026-10-30T20:17:06.627Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}