CVE-2026-77439 - Immich: Album Editor can escalate to Owner role and remove Owner-role members via unguarded API endpoints
CVE ID :CVE-2026-77439 Published : Nov. 5, 2026, 6:17 p.m. | 51 minutes ago Description :Immich is a self-hosted photo and video management solution. Prior to 3.0.3, an authenticated user with editor access to a shared album can change the existing owner's role because album member role...