Lychee (LycheeOrg)
Depends
Confidence: Medium
Buy it if you can run and patch a server and want your photos off cloud services . it is free, open source, and actively maintained.
New check
Comparison
Lychee (LycheeOrg) and PhotoPrism both land on Depends.
Buy it if you can run and patch a server and want your photos off cloud services . it is free, open source, and actively maintained.
Buy if you're technical, privacy-focused, and want your library on your own hardware.
| Compare | Lychee (LycheeOrg) | PhotoPrism |
|---|---|---|
| Verdict | Depends | Depends |
| Best for | Self-hosters comfortable with Docker | Privacy-focused self-hosters |
| Who it's not for | Non-technical users wanting plug-and-play photo backup | Non-technical users wanting one-click setup |
| Privacy | 11 known CVEs plus GitHub advisories; project publishes and patches them, but you must run current releases. | Two 2026 auth-bypass CVEs found; update to the latest build before any public exposure. |
| Support quality | Volunteer community only; no vendor support. | Community support free; dedicated support paid |
| Public sentiment | Self-hosters weigh Lychee against Piwigo, PhotoPrism, and Immich; long-term users are loyal, but the project leans on stretched volunteer maintainers.11 | Users praise PhotoPrism's AI organization and maturity but commonly gripe about mobile app support and the paid membership model. |
| Biggest gotcha | Several 2026 CVEs (SSRF, stored XSS) mean you must update fast. | Run the latest build: two 2026 auth-bypass CVEs hit older versions; never expose unpatched instances publicly. |