CVE-2025-66552

Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ww9m-f8j4-jj9x	Patch Vendor Advisory
https://github.com/nextcloud/server/commit/7cc005c43c72bc384848cf8cb851895827c412f6	Patch
https://github.com/nextcloud/server/pull/50992	Issue Tracking
https://hackerone.com/reports/2890071	Issue Tracking Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nextcloud:nextcloud_server:::::-:::*
	cpe:2.3:a:nextcloud:nextcloud_server:::::enterprise:::*
	cpe:2.3:a:nextcloud:nextcloud_server:::::-:::*
	cpe:2.3:a:nextcloud:nextcloud_server:::::enterprise:::*

History

18 Oct 2026, 14:10

Type	Values Removed	Values Added
Summary		(es) Nextcloud Server es un sistema de nube personal auto hospedado. En Nextcloud Server y Enterprise Server versiones anteriores a?30.0.9 y?31.0.1, el manejo incorrecto de ruta con?groupfolders provocó que la aplicación?admin_audit no registrara correctamente todas las acciones sobre archivos y carpetas dentro de?groupfolders. Esta vulnerabilidad está corregida en Nextcloud Server y Enterprise Server versiones anteriores a?30.0.9 y?31.0.1.

Information

Published : 2025-12-05 17:16

Updated : 2026-10-18 14:10

NVD link : CVE-2025-66552

Mitre link : CVE-2025-66552

CVE.ORG link : CVE-2025-66552

JSON object : View

Products Affected

nextcloud

nextcloud_server

CWE

CWE-778

Insufficient Logging

{"id": "CVE-2025-66552", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-66552", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-12-05T18:24:11.355947Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": ">= 32.0.0beta1, < 32.0.1"}, {"status": "affected", "version": "< 31.0.9"}]}]}], "published": "2025-12-05T17:16:05.687", "references": [{"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-ww9m-f8j4-jj9x", "tags": ["Patch", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/server/commit/7cc005c43c72bc384848cf8cb851895827c412f6", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/server/pull/50992", "tags": ["Issue Tracking"], "source": "security-advisories@github.com"}, {"url": "https://hackerone.com/reports/2890071", "tags": ["Issue Tracking", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-778"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1, incorrect path handling with groupfolders caused the admin_audit app to not properly log all actions on files and folders inside groupfolders. This vulnerability is fixed in Nextcloud Server and Enterprise Server prior to 30.0.9 and 31.0.1."}, {"lang": "es", "value": "Nextcloud Server es un sistema de nube personal auto hospedado. En Nextcloud Server y Enterprise Server versiones anteriores a?30.0.9 y?31.0.1, el manejo incorrecto de ruta con?groupfolders provoc\u00f3 que la aplicaci\u00f3n?admin_audit no registrara correctamente todas las acciones sobre archivos y carpetas dentro de?groupfolders. Esta vulnerabilidad est\u00e1 corregida en Nextcloud Server y Enterprise Server versiones anteriores a?30.0.9 y?31.0.1."}], "lastModified": "2026-10-18T14:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "47EB7CCF-F24C-49BD-8F26-1C948A450CBF", "versionEndExcluding": "30.0.9", "versionStartIncluding": "30.0.0"}, {"criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "E99B7ACC-0CDA-4E0A-B4FB-704625706899", "versionEndExcluding": "30.0.9", "versionStartIncluding": "30.0.0"}, {"criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "D8631F6B-EED4-4B47-84C3-7BC63464AC15", "versionEndExcluding": "31.0.1", "versionStartIncluding": "31.0.0"}, {"criteria": "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:enterprise:*:*:*", "vulnerable": true, "matchCriteriaId": "52B7D78F-BCCC-4178-BB21-AB9587D11386", "versionEndExcluding": "31.0.1", "versionStartIncluding": "31.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}