CVE-2026-119328

Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthenticated machine-learning /predict endpoint in machine-learning/immich ml/main.py accepted an options object and passed its values into model construction in machine-learning/immich ml/models/base.py without restricting security-sensitive parameters. An attacker with network access to the service could set cache dir to an arbitrary writable path, causing model downloads to write there and causing clear cache() to pass that path to shutil.rmtree() after selected model-loading failures. Depending on filesystem permissions and the selected path, this could modify files in mounted data locations or recursively delete an attacker-selected directory. The model-name allowlist prevents this issue from becoming arbitrary-model deserialization or code execution. This issue is fixed in version 3.3.0.