PT-2026-45522 · Nextcloud · Nextcloud

Modhanami · CVE-2026-45277 · Published 2026-06-01 · Updated 2026-06-02

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nextcloud versions prior to 2.7.2

Description Authenticated users can verify if arbitrary files are linked to specific approval workflows used for requesting approval.

Recommendations Update to version 2.7.2.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2026-45277

GHSA-H7GM-VGXR-9HCW

Affected Products

Nextcloud

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/45xxx/CVE-2026-45277.json · Exploit
• https://github.com/nextcloud/security-advisories/security/advisories/GHSA-h7gm-vgxr-9hcw · Vendor Advisory
• https://github.com/nextcloud/approval/pull/356 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-45277 · Security Note
• https://osv.dev/vulnerability/CVE-2026-45277 · Vendor Advisory
• https://t.me/cveNotify/165645 · Telegram Post
• https://hackerone.com/reports/3475210 · Note