© 2026 Hedgehog Software, LLC
Twitter
GitHub
Discord
System
Light
Dark
More
Communities
Docs
About
Terms
Privacy
Search
Star
Feedback
Setup for Free
Harden OIDC - Immich
I
Immich
•
4mo ago
•
15 replies
;-)
Harden OIDC
❓
Question
☑️
Ready
I just found a major security risk
. Immich maps the OIDC using the mail address
, users can change the mail address on PocketID without verification
Immich
Join
A place to hang out, get support, discuss Immich, get announcements about releases and anything else going on.
37,708
Members
View on Discord
Resources
ModelContextProtocol
ModelContextProtocol
MCP Server
Recent Announcements
Similar Threads
Was this page helpful?
Yes
No
Similar Threads
Configuring Authentik OIDC
I
Immich / help-desk-support
14mo ago
Configuring OIDC with environment variables
I
Immich / help-desk-support
10mo ago
Matching existing users up with OIDC users?
I
Immich / help-desk-support
3y ago
OIDC is not working on mobile anymore
I
Immich / help-desk-support
3y ago