CVE-2026-45275

Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to force the system to share a file with approvers. This results in an authorization bypass and privilege escalation, allowing unauthorized distribution of restricted files. This issue has been patched in version 2.7.2.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/nextcloud/approval/pull/392	Issue Tracking Patch
https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v8q8-w6c3-3gv9	Mitigation Vendor Advisory
https://hackerone.com/reports/3593780	Permissions Required

Configurations

Configuration 1 (hide)

cpe:2.3:a:nextcloud:approval:*:*:*:*:*:nextcloud:*:*

History

No history.

Information

Published : 2026-06-01 19:16

Updated : 2026-07-22 07:10

NVD link : CVE-2026-45275

Mitre link : CVE-2026-45275

CVE.ORG link : CVE-2026-45275

JSON object : View

Products Affected

nextcloud

approval

CWE

CWE-285

Improper Authorization

{"id": "CVE-2026-45275", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-45275", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-01T19:31:41.793146Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "nextcloud", "product": "security-advisories", "versions": [{"status": "affected", "version": "< 2.7.2"}]}]}], "published": "2026-06-01T19:16:49.517", "references": [{"url": "https://github.com/nextcloud/approval/pull/392", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nextcloud/security-advisories/security/advisories/GHSA-v8q8-w6c3-3gv9", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://hackerone.com/reports/3593780", "tags": ["Permissions Required"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-285"}]}], "descriptions": [{"lang": "en", "value": "Nextcloud is an open source content collaboration platform. Prior to version 2.7.2, a privilege escalation vulnerability exists in the Approval app that allows a user without sharing permissions to force the system to share a file with approvers. This results in an authorization bypass and privilege escalation, allowing unauthorized distribution of restricted files. This issue has been patched in version 2.7.2."}, {"lang": "es", "value": "Nextcloud es una plataforma de colaboraci\u00f3n de contenido de c\u00f3digo abierto. Antes de la versi\u00f3n 2.7.2, existe una vulnerabilidad de escalada de privilegios en la aplicaci\u00f3n Approval que permite a un usuario sin permisos para compartir forzar al sistema a compartir un archivo con los aprobadores. Esto resulta en una elusi\u00f3n de autorizaci\u00f3n y escalada de privilegios, permitiendo la distribuci\u00f3n no autorizada de archivos restringidos. Este problema ha sido parcheado en la versi\u00f3n 2.7.2."}], "lastModified": "2026-07-22T07:10:00.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nextcloud:approval:*:*:*:*:*:nextcloud:*:*", "vulnerable": true, "matchCriteriaId": "571B6557-A744-42A4-B00C-59172782ADA1", "versionEndExcluding": "2.7.2"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}