Immich ML Container Sends Telemetry to Microsoft by Default via ONNX Runtime

The self-hosted photo app Immich has been found to contact Microsoft servers by default through its Machine Learning component. The behavior stems from ONNX Runtime, a Microsoft inference library whose telemetry is enabled out of the box and produces DNS queries to a Microsoft endpoint during runtime. Researchers note the queries happen regardless of whether sensitive images are being processed, raising concerns about metadata exposure. Users can disable it by setting ORT_DISABLE_TELEMETRY=1 or isolating the container on an internal Docker network, but the issue was reported in August and reportedly remains unfixed by Immich's developers.