---
id: "CVE-2026-119644"
kind: "vulnerability"
aliases: ["CVE-2026-119644"]
title: "Blossom: authorization bypass lets users delete or star others' pictures"
severity: "medium"
cvss: 5.4
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["blossom", "other", "self-hosted"]
not_affected_if: ["readonly-accounts-only", "single-user"]
published_at: "2026-10-30T15:16:47+00:00"
first_seen_at: "2026-10-30T15:31:10+00:00"
updated_at: "2026-10-30T15:33:38+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-119644", "first_seen_at": "2026-10-30T15:31:10+00:00"}]
---

# Blossom: authorization bypass lets users delete or star others' pictures

Blossom through version 1.17.1 does not check ownership when a logged-in non-readonly user acts on pictures by ID. An attacker can permanently delete other users' images and stored files through the picture delete or batch delete endpoints, or change their star status through the star endpoint.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Blossom version; the sources say versions through `1.17.1` are affected.
- Review whether non-readonly user accounts exist on the instance and whether untrusted users can register or log in.

## Timeline

- 2026-10-30T15:31:10+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-119644

## From the sources

Blossom through 1.17.1 contains an authorization bypass vulnerability that allows authenticated non-readonly users to modify other users' pictures by supplying arbitrary picture ids. Attackers can call the picture delete, /picture/del/batch, or /picture/star endpoints to permanently delete victims' images and stored files or change their star status.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_