CVE-2026-105764 | immich-app Immich up to 3.2.3 Thumbnail Generation media.repository.ts unrestricted upload

October 6, 2026 Yanac

A vulnerability was found in immich-app Immich up to 3.2.3. It has been classified as critical. The affected element is an unknown function of the file server/src/repositories/media.repository.ts of the component Thumbnail Generation. Performing a manipulation results in unrestricted upload.

This vulnerability is cataloged as CVE-2026-105764. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More