{"id":"CVE-2026-119644","kind":"vulnerability","aliases":["CVE-2026-119644"],"related":[],"title":"Blossom: authorization bypass lets users delete or star others' pictures","description":"Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims' images and stored files or change their star status.","summary":"Blossom through version 1.17.1 does not check ownership when a logged-in non-readonly user acts on pictures by ID. An attacker can permanently delete other users' images and stored files through the picture delete or batch delete endpoints, or change their star status through the star endpoint.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["blossom","other","self-hosted"],"not_affected_if":["readonly-accounts-only","single-user"],"how_to_check":"- Check the installed Blossom version; the sources say versions through `1.17.1` are affected.\n- Review whether non-readonly user accounts exist on the instance and whether untrusted users can register or log in.","fix":null,"status":"open","published_at":"2026-10-30T15:16:47+00:00","first_seen_at":"2026-10-30T15:31:10+00:00","triaged_at":"2026-10-30T15:33:38+00:00","updated_at":"2026-10-30T15:33:38+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-30T15:33:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Blossom: authorization bypass lets users delete or star others' pictures","impact":"medium","summary":"Blossom through version 1.17.1 does not check ownership when a logged-in non-readonly user acts on pictures by ID. An attacker can permanently delete other users' images and stored files through the picture delete or batch delete endpoints, or change their star status through the star endpoint.","audience":"businesses","category":"other","nicknames":[],"who_cares":["blossom","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"Other users' pictures and stored files permanently deleted by an attacker","analyst_note":"Confirm the fixed version and whether the ownership check is enforced on the batch delete and star endpoints; no fixed version is named in the sources.","how_to_check":"- Check the installed Blossom version; the sources say versions through `1.17.1` are affected.\n- Review whether non-readonly user accounts exist on the instance and whether untrusted users can register or log in.\n- unknown for any other check, the sources do not say.","plain_action":"","needs_analyst":true,"not_affected_if":["single-user","readonly-accounts-only"],"who_is_affected":"Teams that run a self-hosted Blossom instance with multiple user accounts where some accounts are non-readonly. The sources describe authenticated users only, so an instance with no accounts other than trusted administrators is less exposed. unknown whether other configurations are safe.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000694,"input_tokens":4141,"output_tokens":559,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119644':13A,16A '-2026':12A,15A '/picture/del/batch':103C '/picture/star':105C '1.17.1':25B,74C 'act':39B 'allow':81C 'arbitrari':94C 'attack':45B,97C 'authent':82C 'author':2A,77C 'batch':60B 'blossom':1A,17B,22B,72C 'bypass':3A,78C 'call':99C 'chang':64B,116C 'check':28B 'contain':75C 'cve':11A,14A 'delet':6A,48B,58B,61B,102C,109C 'endpoint':62B,71B,106C 'file':54B,114C 'host':21B 'id':43B,96C 'imag':51B,111C 'let':4A 'log':33B 'logged-in':32B 'modifi':88C 'non':36B,84C 'non-readon':35B,83C 'other':9A 'ownership':29B 'perman':47B,108C 'pictur':10A,41B,57B,91C,95C,101C 'readon':37B,85C 'self':20B 'self-host':19B 'star':8A,66B,70B,118C 'status':67B,119C 'store':53B,113C 'suppli':93C 'user':5A,38B,50B,86C,90C 'version':24B 'victim':110C 'vulner':79C","nicknames":[],"mitigations":[],"who_affected":"Teams that run a self-hosted Blossom instance with multiple user accounts where some accounts are non-readonly. The sources describe authenticated users only, so an instance with no accounts other than trusted administrators is less exposed. unknown whether other configurations are safe.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T15:16:47+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119644","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119644","severity":null,"published_at":"2026-10-30T15:16:47+00:00","modified_at":"2026-10-30T15:16:47+00:00","first_seen_at":"2026-10-30T15:31:10+00:00","fetched_at":"2026-10-30T15:31:10+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}