diff --git a/core/Controller/AvatarController.php b/core/Controller/AvatarController.php
index e4d13d218a..bf9a576398 100644
--- a/core/Controller/AvatarController.php
+++ b/core/Controller/AvatarController.php
@@ -115,6 +115,7 @@ class AvatarController extends Controller {
 	/**
 	 * @NoAdminRequired
 	 * @NoCSRFRequired
+	 * @NoSameSiteCookieRequired
 	 * @PublicPage
 	 *
 	 * @param string $userId