Tag thumbnails uses photos from other users

[KentaEl]

In the tag section some of the thumbnails for tags are photos from other accounts. There are no open shares between the accounts.

The tags are auto generated from Recognise, tag thumbnails in the normal Photos are not leaked.

It seems to me to be a pretty serious privacy leak.

• Browser: Safari on iOS and iPadOS
• Memories Version: 5.1.0
• NextcloudPi Version: 1.52.0

[pulsejet]

Did you login as one user, logout and login as another user?

[KentaEl]

Yeah, and on different devices. None of the users are admins.

[pulsejet]

Okay, do you see the thumbs from the other user if you login in a private window?

[KentaEl]

No! So probably cached images in the browser?

[pulsejet]

Yeah. Cache busting is kinda incomplete at the moment.

[KentaEl]

Okay, so I take it that it’s fine as long as the users use different devices?

[pulsejet]

Yes