CVE-2026-119330

The photo and video management solution Immich is vulnerable to an improper authorization issue in versions prior to 3.2.0 . The SharedLinkService.create() function in server/src/services/shared-link.service.ts failed to validate all input fields, allowing an authenticated attacker who knows a vi...