VULNERABILITY INTELLIGENCE

CVE-2026-45277

CVSS score3.3 LOW

EPSS probability0.13%

CISA KEVNot currently listed

Published2026-06-01

Last modified2026-07-22

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references

security-advisories@github.com — Issue Tracking, Patch
security-advisories@github.com — Mitigation, Vendor Advisory
security-advisories@github.com — Permissions Required