# nextcloud security-advisories.

Every CVE that names nextcloud security-advisories among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Nextcloud: Propfind requests for file comments allowed to load comments for other files](https://agentprime.io/advisories/CVE-2026-45810.md)
  `CVE-2026-45810` · CVE record: nextcloud security-advisories · CVSS 6.8 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table Views](https://agentprime.io/advisories/CVE-2026-45722.md)
  `CVE-2026-45722` · CVE record: nextcloud security-advisories · CVSS 7.1 High · Not analysed yet · Published 1 Jun 2026 · Tags: SQL injection
- [Nextcloud: Bypass of second factor authentication on DAV endpoints](https://agentprime.io/advisories/CVE-2026-45691.md)
  `CVE-2026-45691` · CVE record: nextcloud security-advisories · CVSS 5.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Authentication bypass
- [Nextcloud: Two-Factor Authentication Bypass via Pending Session Token Replay](https://agentprime.io/advisories/CVE-2026-45690.md)
  `CVE-2026-45690` · CVE record: nextcloud security-advisories · CVSS 5.9 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Authentication bypass
- [Nextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL Execution](https://agentprime.io/advisories/CVE-2026-45545.md)
  `CVE-2026-45545` · CVE record: nextcloud security-advisories · CVSS 8.2 High · Not analysed yet · Published 1 Jun 2026 · Tags: SQL injection
- [Nextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewService](https://agentprime.io/advisories/CVE-2026-45544.md)
  `CVE-2026-45544` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: CWE-1230
- [Nextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files share](https://agentprime.io/advisories/CVE-2026-45543.md)
  `CVE-2026-45543` · CVE record: nextcloud security-advisories · CVSS 5.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Information disclosure
- [Nextcloud: Calendar app leaked user identifiers via attendee suggestion endpoint](https://agentprime.io/advisories/CVE-2026-45286.md)
  `CVE-2026-45286` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Information disclosure
- [Nextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticate](https://agentprime.io/advisories/CVE-2026-45284.md)
  `CVE-2026-45284` · CVE record: nextcloud security-advisories · CVSS 4.6 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Hidden Public Link creation when sharing to a Team External Member](https://agentprime.io/advisories/CVE-2026-45285.md)
  `CVE-2026-45285` · CVE record: nextcloud security-advisories · CVSS 6.4 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Files Lock app allows users to lock and unlock files of other users](https://agentprime.io/advisories/CVE-2026-45283.md)
  `CVE-2026-45283` · CVE record: nextcloud security-advisories · CVSS 6.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Authentication bypass
- [Nextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file access](https://agentprime.io/advisories/CVE-2026-45282.md)
  `CVE-2026-45282` · CVE record: nextcloud security-advisories · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set Update](https://agentprime.io/advisories/CVE-2026-45281.md)
  `CVE-2026-45281` · CVE record: nextcloud security-advisories · CVSS 8.1 High · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Limited path traversal via template API if using \`{lang}\` in config](https://agentprime.io/advisories/CVE-2026-45279.md)
  `CVE-2026-45279` · CVE record: nextcloud security-advisories · CVSS 4.4 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Path traversal
- [Nextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypass](https://agentprime.io/advisories/CVE-2026-45278.md)
  `CVE-2026-45278` · CVE record: nextcloud security-advisories · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Open redirect
- [Nextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associations](https://agentprime.io/advisories/CVE-2026-45277.md)
  `CVE-2026-45277` · CVE record: nextcloud security-advisories · CVSS 3.3 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Information disclosure
- [Nextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approvers](https://agentprime.io/advisories/CVE-2026-45275.md)
  `CVE-2026-45275` · CVE record: nextcloud security-advisories · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Missing permission check for from submissions](https://agentprime.io/advisories/CVE-2026-45267.md)
  `CVE-2026-45267` · CVE record: nextcloud security-advisories · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Information disclosure, Broken access control
- [Nextcloud: Unauthorized force-mute from missing permission check when using internal signaling](https://agentprime.io/advisories/CVE-2026-45266.md)
  `CVE-2026-45266` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share owner](https://agentprime.io/advisories/CVE-2026-45159.md)
  `CVE-2026-45159` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Valid share tokens allow to access tempory upload files of share owner](https://agentprime.io/advisories/CVE-2026-45157.md)
  `CVE-2026-45157` · CVE record: nextcloud security-advisories · CVSS 6.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDC](https://agentprime.io/advisories/CVE-2026-45156.md)
  `CVE-2026-45156` · CVE record: nextcloud security-advisories · CVSS 8.1 High · Not analysed yet · Published 1 Jun 2026 · Tags: Authentication bypass
- [Nextcloud: Private circle can be added to another circle via API](https://agentprime.io/advisories/CVE-2026-45155.md)
  `CVE-2026-45155` · CVE record: nextcloud security-advisories · CVSS 2.6 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: Improper Access Control in Collectives](https://agentprime.io/advisories/CVE-2026-45154.md)
  `CVE-2026-45154` · CVE record: nextcloud security-advisories · CVSS 2.6 Low · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud: PIN bypass in PassCodeActivity via back button](https://agentprime.io/advisories/CVE-2026-45153.md)
  `CVE-2026-45153` · CVE record: nextcloud security-advisories · CVSS 4.6 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Authentication bypass
- [Nextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File Renames](https://agentprime.io/advisories/CVE-2026-45264.md)
  `CVE-2026-45264` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 1 Jun 2026 · Tags: Broken access control
- [Nextcloud Twofactor WebAuthn app was updated based on public key](https://agentprime.io/advisories/CVE-2025-66558.md)
  `CVE-2025-66558` · CVE record: nextcloud security-advisories · CVSS 3.1 Low · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud talk allows participants to blindly delete poll drafts of other users by ID](https://agentprime.io/advisories/CVE-2025-66556.md)
  `CVE-2025-66556` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud Contacts vulnerable to Stored XSS in contacts app via organisation and title field](https://agentprime.io/advisories/CVE-2025-66554.md)
  `CVE-2025-66554` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 5 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Nextcloud Desktop discloses information when attempting to lock a file inside a end-to-end encrypted directory](https://agentprime.io/advisories/CVE-2025-66549.md)
  `CVE-2025-66549` · CVE record: nextcloud security-advisories · CVSS 2.4 Low · Not analysed yet · Published 5 Dec 2025 · Tags: Information disclosure
- [Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin](https://agentprime.io/advisories/CVE-2025-66545.md)
  `CVE-2025-66545` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-707
- [Nextcloud Approval app allows users to request approval for other users file](https://agentprime.io/advisories/CVE-2025-66515.md)
  `CVE-2025-66515` · CVE record: nextcloud security-advisories · CVSS 2.7 Low · Not analysed yet · Published 5 Dec 2025 · Tags: Authentication bypass
- [Nextcloud Mail stored HTML injection in subject text](https://agentprime.io/advisories/CVE-2025-66514.md)
  `CVE-2025-66514` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 5 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Nextcloud Deck app allowed user with "Can share" permission to modify permissions of other non-owners](https://agentprime.io/advisories/CVE-2025-66557.md)
  `CVE-2025-66557` · CVE record: nextcloud security-advisories · CVSS 5.4 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud Deck app allows to spoof file extensions by using RTLO characters](https://agentprime.io/advisories/CVE-2025-66548.md)
  `CVE-2025-66548` · CVE record: nextcloud security-advisories · CVSS 3.3 Low · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-116
- [Nextcloud Tables app allowed users to view columns metadata information of any table](https://agentprime.io/advisories/CVE-2025-66553.md)
  `CVE-2025-66553` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud Tables is missing an ownership check which allows moving columns into tables of other users](https://agentprime.io/advisories/CVE-2025-66551.md)
  `CVE-2025-66551` · CVE record: nextcloud security-advisories · CVSS 6.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud Tables app share information not limited to relevant users](https://agentprime.io/advisories/CVE-2025-66513.md)
  `CVE-2025-66513` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud Calendar attachments of local files are offered to downloaded](https://agentprime.io/advisories/CVE-2025-66550.md)
  `CVE-2025-66550` · CVE record: nextcloud security-advisories · CVSS 5.7 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-241
- [Nextcloud Calendar app allowed booking appointments without the generated token](https://agentprime.io/advisories/CVE-2025-66546.md)
  `CVE-2025-66546` · CVE record: nextcloud security-advisories · CVSS 3.3 Low · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud Calendar app used predictable proposal participant tokens](https://agentprime.io/advisories/CVE-2025-66511.md)
  `CVE-2025-66511` · CVE record: nextcloud security-advisories · CVSS 4.8 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Weak cryptography or TLS
- [Nextcloud Server admin_audit does not log all actions on files in groupfolders](https://agentprime.io/advisories/CVE-2025-66552.md)
  `CVE-2025-66552` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-778
- [Nextcloud Server users can modify tags on files that do not belong to them](https://agentprime.io/advisories/CVE-2025-66547.md)
  `CVE-2025-66547` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Broken access control
- [Nextcloud Server vulnerable to XSS in SVG images when opened outside of Nextcloud](https://agentprime.io/advisories/CVE-2025-66512.md)
  `CVE-2025-66512` · CVE record: nextcloud security-advisories · CVSS 5.4 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Cross-site scripting (XSS)
- [Nextcloud Server Contacts Search allowed users to retrieve contact information of other users beyond their contact list](https://agentprime.io/advisories/CVE-2025-66510.md)
  `CVE-2025-66510` · CVE record: nextcloud security-advisories · CVSS 4.5 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: Information disclosure
- [Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table](https://agentprime.io/advisories/CVE-2025-58051.md)
  `CVE-2025-58051` · CVE record: nextcloud security-advisories · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: CWE-841
- [Nextcloud Server vulnerable to insecure temporary file creation, race with write access and permission](https://agentprime.io/advisories/CVE-2025-47794.md)
  `CVE-2025-47794` · CVE record: nextcloud security-advisories · CVSS 2.6 Low · Not analysed yet · Published 16 May 2025 · Tags: Broken access control
- [Nextcloud Server and Groupfolders app vulnerable to bypass of group folder quota limit using attachment in text file](https://agentprime.io/advisories/CVE-2025-47793.md)
  `CVE-2025-47793` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 16 May 2025 · Tags: Denial of service
- [Nextcloud Desktop 3rdparty applications can create share links via socket API](https://agentprime.io/advisories/CVE-2025-47792.md)
  `CVE-2025-47792` · CVE record: nextcloud security-advisories · CVSS 5.0 Medium · Not analysed yet · Published 16 May 2025 · Tags: Broken access control
- [Nextcloud Server's test remote endpoint is not rate limited](https://agentprime.io/advisories/CVE-2025-47791.md)
  `CVE-2025-47791` · CVE record: nextcloud security-advisories · CVSS 4.3 Medium · Not analysed yet · Published 16 May 2025 · Tags: Server-side request forgery (SSRF)
- [Nextcloud Server doesn't request second factor after session timeout](https://agentprime.io/advisories/CVE-2025-47790.md)
  `CVE-2025-47790` · CVE record: nextcloud security-advisories · CVSS 6.4 Medium · Not analysed yet · Published 16 May 2025 · Tags: Authentication bypass
- [Nextcloud Mail app does not respect download permissions in shares](https://agentprime.io/advisories/CVE-2024-52509.md)
  `CVE-2024-52509` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 15 Nov 2024 · Tags: Broken access control
- [Nextcloud Mail auto configurator can be tricked into sending account information to wrong servers](https://agentprime.io/advisories/CVE-2024-52508.md)
  `CVE-2024-52508` · CVE record: nextcloud security-advisories · CVSS 8.2 High · Not analysed yet · Published 15 Nov 2024 · Tags: Information disclosure
- [Nextcloud Desktop client behaves incorrectly if the initial end-to-end-encryption signature is empty](https://agentprime.io/advisories/CVE-2024-52510.md)
  `CVE-2024-52510` · CVE record: nextcloud security-advisories · CVSS 4.2 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Weak cryptography or TLS
- [Share information of the Nextcloud Tables app is not limited to affected users](https://agentprime.io/advisories/CVE-2024-52507.md)
  `CVE-2024-52507` · CVE record: nextcloud security-advisories · CVSS 3.5 Low · Not analysed yet · Published 15 Nov 2024 · Tags: Broken access control
- [Nextcloud Tables has an Authorization Bypass Through User-Controlled Key in Tables](https://agentprime.io/advisories/CVE-2024-52511.md)
  `CVE-2024-52511` · CVE record: nextcloud security-advisories · CVSS 6.3 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Broken access control
- [Nextcloud User OIDC has an open redirection when logging in with User OIDC](https://agentprime.io/advisories/CVE-2024-52512.md)
  `CVE-2024-52512` · CVE record: nextcloud security-advisories · CVSS 3.3 Low · Not analysed yet · Published 15 Nov 2024 · Tags: Open redirect
- [Nextcloud Server's Attachments folder for Text app is accessible on "Files drop" and "Password protected" shares](https://agentprime.io/advisories/CVE-2024-52513.md)
  `CVE-2024-52513` · CVE record: nextcloud security-advisories · CVSS 2.6 Low · Not analysed yet · Published 15 Nov 2024 · Tags: Information disclosure
- [Nextcloud Server allows users to copy folder that contain files that are blocked by the files access control](https://agentprime.io/advisories/CVE-2024-52514.md)
  `CVE-2024-52514` · CVE record: nextcloud security-advisories · CVSS 4.1 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: Broken access control
- [Nextcloud Server has incomplete sanitization of SVG files allows to embed other images into previews](https://agentprime.io/advisories/CVE-2024-52515.md)
  `CVE-2024-52515` · CVE record: nextcloud security-advisories · CVSS 5.7 Medium · Not analysed yet · Published 15 Nov 2024 · Tags: CWE-706

Older: <https://agentprime.io/advisories/technology/nextcloud-security-advisories.md?cursor=WyIyMDI0LTExLTE1VDE3OjAzOjA5LjAzMzAwMFoiLCJDVkUtMjAyNC01MjUxNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=nextcloud-security-advisories>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/nextcloud-security-advisories/>. Everything for agents: <https://agentprime.io/llms.txt>.