From 4adb778c2757374ec37826aaa11b7c87484083c1 Mon Sep 17 00:00:00 2001
From: Josh Hawkins <32435876+hawkeye217@users.noreply.github.com>
Date: Thu, 23 Apr 2026 12:54:31 -0500
Subject: [PATCH] check access to similarity search event id camera

---
 frigate/api/event.py | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/frigate/api/event.py b/frigate/api/event.py
index a7d1cffc87..fc7c58c375 100644
--- a/frigate/api/event.py
+++ b/frigate/api/event.py
@@ -754,6 +754,15 @@ def events_search(
                 status_code=404,
             )
 
+        if search_event.camera not in allowed_cameras:
+            return JSONResponse(
+                content={
+                    "success": False,
+                    "message": "Event not found",
+                },
+                status_code=404,
+            )
+
         thumb_result = context.search_thumbnail(search_event)
         thumb_ids = {result[0]: result[1] for result in thumb_result}
         search_results = {