EUVD-2026-20583Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessAuthenticated attacker uploads crafted equirectangular image
-
ExploitOCR extracts malicious text from image
-
ExecutionPanorama viewer renders text via unsanitized innerHTML
-
ImpactArbitrary JavaScript executes in victim's browser
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Output encoding, context-aware escaping
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Requires authenticated user access to Immich versions prior to 2.7.0. Attacker uploads malicious equirectangular image; victim must view panorama with OCR overlay enabled in 360° panorama viewer. Victim interaction required: opening the panorama view. |
| Impact | Authenticated stored XSS in panorama OCR overlay enables session hijacking, private photo/GPS exfiltration, and biometric data access. High impact (C:H, I:H, A:H) but requires local attack vector and user interaction to trigger viewing. CVSS 7.3 reflects moderate urgency; self-hosted deployments with shared panorama collections face greatest risk. |
| Exploit ScenarioDerived | Attacker uploads equirectangular image with OCR-extractable malicious text; victim views panorama with OCR overlay enabled, triggering unsanitized innerHTML rendering. JavaScript executes in victim's session, creating persistent API key for account takeover and data exfiltration. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 08, 2026
Stored Cross-Site Scripting in Immich photo management platform versions prior to 2.7.0 enables authenticated attackers to execute arbitrary JavaScript when victims view malicious 360° panorama images with OCR overlay enabled. Attackers upload specially crafted equirectangular images containing malicious text that OCR extracts and the panorama viewer renders unsanitized via innerHTML. Exploitation permits session hijacking through persistent API key creation, exfiltration of private photos, GPS location history theft, and unauthorized access to facial biometric data. No public exploit identified at time of analysis.
RemediationAI
Vendor-released patch: Immich 2.7.0 resolves this vulnerability through input sanitization in the panorama viewer OCR rendering pathway. Organizations should immediately upgrade all Immich instances to version 2.7.0 or later. As an interim workaround, disable OCR overlay functionality in the panorama viewer interface or restrict panorama upload permissions to trusted administrators only until patching is complete. Review API keys created during the vulnerability window for unauthorized persistent access tokens. Full vendor advisory available at https://github.com/immich-app/immich/security/advisories/GHSA-9qx4-67jm-cc66 with additional technical details and remediation guidance.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Root cause is improper neutralization of input (CWE-79) in panorama viewer's OCR text rendering path. OCR engine extracts text from uploaded equirectangular images, which is subsequently inserted into DOM via innerHTML without sanitization, allowing JavaScript execution in victim browsers accessing affected panoramas with OCR overlay active.
Know when Immich gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
5DescriptionNVD
immich is a high performance self-hosted photo and video management solution. Prior to 2.7.0, sStored Cross-Site Scripting (XSS) in the 360° panorama viewer allows any authenticated user to execute arbitrary JavaScript in the browser of any other user who views the malicious panorama with the OCR overlay enabled. The attacker uploads an equirectangular image containing crafted text; OCR extracts it, and the panorama viewer renders it via innerHTML without sanitization. This enables session hijacking (via persistent API key creation), private photo exfiltration, and access to GPS location history and face biometric data. This vulnerability is fixed in 2.7.0.
Executive ViewAI
Immich photo management platform versions before 2.7.0 contain a stored cross-site scripting vulnerability that allows authenticated users to inject malicious code through 360° panorama images with OCR enabled, potentially compromising session tokens, private photo libraries, location history, and facial recognition data of other users who view the malicious content. Organizations using Immich should prioritize immediate patching, as the attack requires only standard user authentication but impacts all users accessing shared photo galleries.
Vendor-released patch: Immich 2.7.0 or later. If immediate patching is not feasible, disable OCR and panorama viewer features in Immich configuration as interim mitigation; restrict photo library sharing to essential users only; implement network segmentation to limit Immich user base; monitor for suspicious API key creation events.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.
Album ownership takeover in immich before 3.0.3 allows a user with shared-album editor access to escalate to full owner
Immich versions prior to 2.5.0 contain an improper access control flaw that allows any authenticated API key to escalate
Reflected cross-site scripting in Immich (commits 4ffa26c9 through pre-4eb1003) allows a single-click account takeover o
Authenticated partners in Immich through 3.3.1 can read metadata from assets stored in another user's Locked Folder - in
Remote code execution in Immich before 3.2.4 lets any authenticated non-admin user with upload permission run arbitrary
Locked asset visibility bypass in Immich through 3.1.0 exposes private photo and video assets to unauthorized viewers vi
Improper authorization in Immich's Shared Link Preview Handler (server/src/utils/access.ts, function checkSharedLinkAcce
Unauthenticated filesystem path injection in Immich's machine-learning service (vulnerable through 3.0.3, fixed in 3.3.0
Immich prior to version 2.6.0 discloses shared album passwords in cleartext within URL query parameters during authentic
Open redirect vulnerability in Immich prior to version 2.7.3 allows authenticated attackers to craft malicious shared al
Immich before 3.0.0 leaks the GPS coordinates and asset identifiers of a sharer's archived photos and videos to view-onl
Immich before 3.2.0 lets an authenticated regular user attach another user's asset to a shared link they legitimately ow
Exploit-DB