Unauthorized access to icons #512

New Issue

MrUnknownDE · 2026-04-05T21:36:15+02:00

MrUnknownDE commented

2026-04-05 21:36:15 +02:00

Originally created by @showhwa on 6/25/2025

Vaultwarden Support String

Unrelated

Vaultwarden Build Version

Vaultwarden 1.34.1 Web-Vault 2025.5.0

Deployment method

Official Container Image

Custom deployment method

Unrelated

Reverse Proxy

nginx version: nginx/1.22.1 from apt-get

Host/Server Operating System

Linux

Operating System Version

Unrelated

Clients

Web Vault

Client Version

Unrelated

Steps To Reproduce

Open any incognito tab
Open https://{domain}/icons/Github.com/icon.png or https://{domain}/icons/google.com/icon.png
enter

Expected Result

401: Unauthorized

Actual Result

show icons

Logs

Screenshots or Videos

Additional Context

https://{domain}/icons/google.com/icon.png
https://{domain}/icons/youtube.com/icon.png
https://{domain}/icons/Github.com/icon.png
https://{domain}/icons/github.com/icon.png
https://{domain}/icons/{site-domain}/icon.png

*Originally created by @showhwa on 6/25/2025* ### Vaultwarden Support String Unrelated ### Vaultwarden Build Version Vaultwarden 1.34.1 Web-Vault 2025.5.0 ### Deployment method Official Container Image ### Custom deployment method Unrelated ### Reverse Proxy nginx version: nginx/1.22.1 from apt-get ### Host/Server Operating System Linux ### Operating System Version Unrelated ### Clients Web Vault ### Client Version Unrelated ### Steps To Reproduce 1. Open any incognito tab 2. Open https://{domain}/icons/Github.com/icon.png or https://{domain}/icons/google.com/icon.png 3. enter ### Expected Result 401: Unauthorized ### Actual Result show icons ### Logs ```text ``` ### Screenshots or Videos ![Image](https://github.com/user-attachments/assets/6ecfab93-a098-47d3-81e1-66156a1d4c45) ### Additional Context https://{domain}/icons/google.com/icon.png https://{domain}/icons/youtube.com/icon.png https://{domain}/icons/Github.com/icon.png https://{domain}/icons/github.com/icon.png https://{domain}/icons/{site-domain}/icon.png

MrUnknownDE closed this issue

2026-04-05 21:36:15 +02:00

Sign in to join this conversation.

No Label bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#512