EUVD-2026-56010
GHSA-mj7v-rvf9-xq38
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Network-accessible endpoint exploitable with only a low-privilege preview token; impact is confined to partial confidentiality of album cover images with no integrity or availability effect.
Primary rating from Vendor (TuranSec).
CVSS VectorVendor: TuranSec
Lifecycle Timeline
1DescriptionCVE.org
An insecure direct object reference vulnerability in PhotoPrism through commit bb0b933 allows any user with a valid preview token to retrieve the original-resolution cover photo of any album. The AlbumCover handler does not verify that the requesting user is authorized to access the specified album before serving the cover image. An attacker with any valid preview token can enumerate and download album cover images belonging to other users.
AnalysisAI
PhotoPrism's AlbumCover handler through commit bb0b933 exposes an insecure direct object reference that permits any user holding a valid preview token to retrieve original-resolution cover images from albums owned by other users. The handler omits ownership verification entirely, making album ID enumeration sufficient to cross user trust boundaries. No public exploit code has been identified at time of analysis, but the low attack complexity makes this straightforward to abuse in any multi-user PhotoPrism deployment.
Technical ContextAI
PhotoPrism is an AI-powered, self-hosted photo management application. The vulnerability resides in the AlbumCover HTTP handler, which serves cover images for user-created albums. CWE-639 (Authorization Through User-Controlled Key) describes the root cause precisely: the application resolves and serves the requested album cover based on a caller-supplied album identifier without confirming that the requesting principal owns or has been granted explicit access to that album. The affected CPE is cpe:2.3:a:photoprism:photoprism:*:*:*:*:*:*:*:*, covering all versions up to and including commit bb0b933 per EUVD-2026-56010. Notably, a preview token - a reduced-scope credential issued by PhotoPrism for limited access scenarios - is sufficient to trigger the flaw, meaning the exploitable population includes any party that has obtained even minimal token-level access to the instance.
RemediationAI
No vendor-released patch with a confirmed fix version has been identified at time of analysis - the sole reference provided points to the upstream repository at https://github.com/photoprism/photoprism without specifying a tagged release addressing the AlbumCover authorization gap. Operators should monitor the repository for commits or releases that add ownership verification to the AlbumCover handler. As a compensating control, restricting PhotoPrism access to a private network or VPN reduces exposure of the endpoint to a smaller, more trusted user population - note this does not eliminate the IDOR for malicious authenticated insiders. Administrators should audit preview token issuance and revoke tokens held by untrusted or unknown parties; tightening token distribution reduces the pool of potential attackers at the cost of limiting legitimate preview-sharing workflows. Organizations with strict privacy requirements should consider temporarily disabling album sharing or public access features until a confirmed fix is available.
Same technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today