CVE-2026-119328 | immich-app Immich up to 3.2.x Predict Endpoint base.py clear_cache cache_dir input validation

October 30, 2026 Yanac

A vulnerability, which was classified as critical, was found in immich-app Immich up to 3.2.x. This affects the function clear_cache of the file machine-learning/immich_ml/models/base.py of the component Predict Endpoint. The manipulation of the argument cache_dir results in improper input validation.

This vulnerability is cataloged as CVE-2026-119328. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More