CVE Catalog
CVE-2026-45277
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk0.13%
3th percentile - higher than 3% of all known CVEs
Summary
In Nextcloud prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.
Risk Assessment
Authenticated users can gain unauthorized insight into file-workflow associations, potentially leading to information disclosure.
Recommendation
Update Nextcloud to version 2.7.2 or later.
Original NVD description (English source)
Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, authenticated users can check if arbitrary files are associated with specific approval workflows where they can request approval. This issue has been patched in version 2.7.2.