The auth.yml file generated by Immich CLI is world readable #2130

New issue

Closed

opened 2026-02-20 01:03:18 -05:00 by deekerman · 1 comment

deekerman commented

2026-02-20 01:03:18 -05:00

Owner

Originally created by @jwillikers on GitHub (Feb 4, 2024).

Originally assigned to: @etnoy on GitHub.

The bug

Using the immich login-key command for Immich CLI generates the file ~/.config/immich/auth.yml. This file contains the sensitive API key, but the file is world readable by default.

ls -l ~/.config/immich/
total 4
-rw-r--r-- 1 jordan jordan 97 Feb  4 09:37 auth.yml

The OS that Immich Server is running on

N/A

Version of Immich Server

N/A

Version of Immich Mobile App

N/A

Platform with the issue

Server
Web
Mobile

Your docker-compose.yml content

N/A

Your .env content

N/A

Reproduction steps

1. Use `immich login-key` to authenticate to the Immich instance.

Additional information

Immich CLI is version 2.0.6.

Originally created by @jwillikers on GitHub (Feb 4, 2024). Originally assigned to: @etnoy on GitHub. ### The bug Using the `immich login-key` command for Immich CLI generates the file `~/.config/immich/auth.yml`. This file contains the sensitive API key, but the file is world readable by default. ```sh ls -l ~/.config/immich/ total 4 -rw-r--r-- 1 jordan jordan 97 Feb 4 09:37 auth.yml ``` ### The OS that Immich Server is running on N/A ### Version of Immich Server N/A ### Version of Immich Mobile App N/A ### Platform with the issue - [ ] Server - [ ] Web - [ ] Mobile ### Your docker-compose.yml content ```YAML N/A ``` ### Your .env content ```Shell N/A ``` ### Reproduction steps ```bash 1. Use `immich login-key` to authenticate to the Immich instance. ``` ### Additional information Immich CLI is version 2.0.6.